qcow2: Fix error handling in qcow2_alloc_cluster_offset
authorKevin Wolf <kwolf@redhat.com>
Wed, 18 Apr 2012 14:18:14 +0000 (16:18 +0200)
committerKevin Wolf <kwolf@redhat.com>
Thu, 19 Apr 2012 14:03:27 +0000 (16:03 +0200)
commit8dc0a5e7a06c059683f9c379c0a4b0bbc20d5c74
treecb346bf3bedf39c1ad707a13e34da40f831a7569
parente82dabd82e7a8ce0294bce829b3d2dd25eb3a514
qcow2: Fix error handling in qcow2_alloc_cluster_offset

If do_alloc_cluster_offset() fails, the error handling code tried to
remove the request from the in-flight queue, to which it wasn't added
yet, resulting in a NULL pointer dereference.

m->nb_clusters really only becomes != 0 when the request is in the list.

Signed-off-by: Kevin Wolf <kwolf@redhat.com>
block/qcow2-cluster.c