Don't leak VLANClientState on PCI hot remove

destroy_nic() requires that NICInfo::private by a PCIDevice pointer,
but then goes on to require that the same pointer matches
VLANClientState::opaque.

That is no longer the case for virtio-net since qdev and wasn't
previously the case for rtl8139, ne2k_pci or eepro100.

Make the situation a lot more clear by maintaining a VLANClientState
pointer in NICInfo.

Signed-off-by: Mark McLoughlin <markmc@redhat.com>
Signed-off-by: Anthony Liguori <aliguori@us.ibm.com>

diff --git a/hw/device-hotplug.c b/hw/device-hotplug.c
index 3bdc048c685031b690526bbb6cc1fb3c6667bb16..e178083419839d716e5dd27f2429935765e77888 100644 (file)
--- a/hw/device-hotplug.c
+++ b/hw/device-hotplug.c
@@ -55,12 +55,7 @@ void destroy_nic(dev_match_fn *match_fn, void *arg)
         nic = &nd_table[i];
         if (nic->used) {
             if (nic->private && match_fn(nic->private, arg)) {
-                if (nic->vlan) {
-                    VLANClientState *vc;
-                    vc = qemu_find_vlan_client(nic->vlan, nic->private);
-                    if (vc)
-                        qemu_del_vlan_client(vc);
-                }
+                qemu_del_vlan_client(nic->vc);
                 net_client_uninit(nic);
             }
         }

diff --git a/hw/dp8393x.c b/hw/dp8393x.c
index 1a271954d5d11483432e6ca1876b6bf4eaeb4b7b..e2f86b81d8fe30d7ad8c1361004f62d0bb111ef9 100644 (file)
--- a/hw/dp8393x.c
+++ b/hw/dp8393x.c
@@ -890,8 +890,9 @@ void dp83932_init(NICInfo *nd, target_phys_addr_t base, int it_shift,
     s->watchdog = qemu_new_timer(vm_clock, dp8393x_watchdog, s);
     s->regs[SONIC_SR] = 0x0004; /* only revision recognized by Linux */
 
-    s->vc = qemu_new_vlan_client(nd->vlan, nd->model, nd->name, nic_can_receive,
-                                 nic_receive, NULL, nic_cleanup, s);
+    s->vc = nd->vc = qemu_new_vlan_client(nd->vlan, nd->model, nd->name,
+                                          nic_can_receive, nic_receive, NULL,
+                                          nic_cleanup, s);
 
     qemu_format_nic_info_str(s->vc, nd->macaddr);
     qemu_register_reset(nic_reset, s);

diff --git a/hw/etraxfs_eth.c b/hw/etraxfs_eth.c
index 58f9f4e1f4701b228fa27713d3163c8a4a3b4434..e1e5d8cae00876e3f22f5f2859e89158e0125ede 100644 (file)
--- a/hw/etraxfs_eth.c
+++ b/hw/etraxfs_eth.c
@@ -590,9 +590,9 @@ void *etraxfs_eth_init(NICInfo *nd, target_phys_addr_t base, int phyaddr)
        eth->ethregs = cpu_register_io_memory(eth_read, eth_write, eth);
        cpu_register_physical_memory (base, 0x5c, eth->ethregs);
 
-       eth->vc = qemu_new_vlan_client(nd->vlan, nd->model, nd->name,
-                                      eth_can_receive, eth_receive, NULL,
-                                      eth_cleanup, eth);
+       eth->vc = nd->vc = qemu_new_vlan_client(nd->vlan, nd->model, nd->name,
+                                                eth_can_receive, eth_receive,
+                                                NULL, eth_cleanup, eth);
        eth->vc->opaque = eth;
        eth->vc->link_status_changed = eth_set_link;
 

diff --git a/hw/mcf_fec.c b/hw/mcf_fec.c
index 1676bcb75c5a536f0bc3d34da48c00547491bf14..27f27a6cd9461da4604d724a2dfb2f9bae82e750 100644 (file)
--- a/hw/mcf_fec.c
+++ b/hw/mcf_fec.c
@@ -462,9 +462,9 @@ void mcf_fec_init(NICInfo *nd, target_phys_addr_t base, qemu_irq *irq)
                                            mcf_fec_writefn, s);
     cpu_register_physical_memory(base, 0x400, s->mmio_index);
 
-    s->vc = qemu_new_vlan_client(nd->vlan, nd->model, nd->name,
-                                 mcf_fec_can_receive, mcf_fec_receive, NULL,
-                                 mcf_fec_cleanup, s);
+    s->vc = nd->vc = qemu_new_vlan_client(nd->vlan, nd->model, nd->name,
+                                          mcf_fec_can_receive, mcf_fec_receive,
+                                          NULL, mcf_fec_cleanup, s);
     memcpy(s->macaddr, nd->macaddr, 6);
     qemu_format_nic_info_str(s->vc, s->macaddr);
 }

diff --git a/hw/mipsnet.c b/hw/mipsnet.c
index 803522949bb3b7f9af58c66088264f262decad8a..e98c57699bf522602094513c9dda8f8c19656b1d 100644 (file)
--- a/hw/mipsnet.c
+++ b/hw/mipsnet.c
@@ -263,9 +263,9 @@ void mipsnet_init (int base, qemu_irq irq, NICInfo *nd)
     s->io_base = base;
     s->irq = irq;
     if (nd && nd->vlan) {
-        s->vc = qemu_new_vlan_client(nd->vlan, nd->model, nd->name,
-                                     mipsnet_can_receive, mipsnet_receive, NULL,
-                                     mipsnet_cleanup, s);
+        s->vc = nd->vc = qemu_new_vlan_client(nd->vlan, nd->model, nd->name,
+                                              mipsnet_can_receive, mipsnet_receive,
+                                              NULL, mipsnet_cleanup, s);
     } else {
         s->vc = NULL;
     }

diff --git a/hw/ne2000.c b/hw/ne2000.c
index 66ff29d0fc0b60b8c18d185132969440ab1a885a..b9c018ab2e8f13c7661f37dfd7d1e62243e275ce 100644 (file)
--- a/hw/ne2000.c
+++ b/hw/ne2000.c
@@ -759,9 +759,9 @@ void isa_ne2000_init(int base, qemu_irq irq, NICInfo *nd)
 
     ne2000_reset(s);
 
-    s->vc = qemu_new_vlan_client(nd->vlan, nd->model, nd->name,
-                                 ne2000_can_receive, ne2000_receive, NULL,
-                                 isa_ne2000_cleanup, s);
+    s->vc = nd->vc = qemu_new_vlan_client(nd->vlan, nd->model, nd->name,
+                                          ne2000_can_receive, ne2000_receive,
+                                          NULL, isa_ne2000_cleanup, s);
 
     qemu_format_nic_info_str(s->vc, s->macaddr);
 

diff --git a/hw/qdev.c b/hw/qdev.c
index 4c550094e22474d518aca5b8392efed2f6194a87..83e98bf3ed8577ec3bb0d6e4ce85a1861fd94f37 100644 (file)
--- a/hw/qdev.c
+++ b/hw/qdev.c
@@ -250,8 +250,9 @@ VLANClientState *qdev_get_vlan_client(DeviceState *dev,
 {
     NICInfo *nd = dev->nd;
     assert(nd);
-    return qemu_new_vlan_client(nd->vlan, nd->model, nd->name, can_receive,
-                                receive, receive_iov, cleanup, opaque);
+    nd->vc = qemu_new_vlan_client(nd->vlan, nd->model, nd->name, can_receive,
+                                  receive, receive_iov, cleanup, opaque);
+    return nd->vc;
 }
 
 

diff --git a/hw/usb-net.c b/hw/usb-net.c
index 0e80ca69238b7cd6ff77692bd293e081a7342936..8214a68be25c8b6506497401818ad0ffdff7db53 100644 (file)
--- a/hw/usb-net.c
+++ b/hw/usb-net.c
@@ -1458,11 +1458,11 @@ USBDevice *usb_net_init(NICInfo *nd)
 
     pstrcpy(s->dev.devname, sizeof(s->dev.devname),
                     "QEMU USB Network Interface");
-    s->vc = qemu_new_vlan_client(nd->vlan, nd->model, nd->name,
-                                 usbnet_can_receive,
-                                 usbnet_receive,
-                                 NULL,
-                                 usbnet_cleanup, s);
+    s->vc = nd->vc = qemu_new_vlan_client(nd->vlan, nd->model, nd->name,
+                                          usbnet_can_receive,
+                                          usbnet_receive,
+                                          NULL,
+                                          usbnet_cleanup, s);
 
     qemu_format_nic_info_str(s->vc, s->mac);
 

diff --git a/net.h b/net.h
index 64d5e22f165e24d97eb8d25c5814003eb811ae52..6026e10361beb31a1493565fd40a7da460dacd45 100644 (file)
--- a/net.h
+++ b/net.h
@@ -96,6 +96,7 @@ struct NICInfo {
     const char *name;
     const char *devaddr;
     VLANState *vlan;
+    VLANClientState *vc;
     void *private;
     int used;
     int bootable;