From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001

From: Victor Toso <victortoso@redhat.com>

Date: Fri, 13 Nov 2015 10:46:43 +0100

Subject: [PATCH] spicevmc: set state of DeviceInstance to NULL

After spice_char_device_state_destroy is called spicevmc should not keep

reference to that memory. state->chardev_st and sin->st point to the

same SpiceCharDeviceState and both should be set to NULL when it is

destroyed.

---

 server/spicevmc.c | 1 +

 1 file changed, 1 insertion(+)

diff --git a/server/spicevmc.c b/server/spicevmc.c

index e10f183..94cb8a7 100644

--- a/server/spicevmc.c

+++ b/server/spicevmc.c

@@ -559,6 +559,7 @@ void spicevmc_device_disconnect(SpiceCharDeviceInstance *sin)

     }

     spice_char_device_state_destroy(sin->st);

     state->chardev_st = NULL;

+    sin->st = NULL;

     reds_unregister_channel(&state->channel);

     free(state->pipe_item);