From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from AM0PR83CU005.outbound.protection.outlook.com (mail-westeuropeazon11020110.outbound.protection.outlook.com [52.101.69.110]) by lore.virtuozzo.com (Postfix) with ESMTPS id 712DB80781 for ; Tue, 6 Oct 2026 15:35:58 +0000 (UTC) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=DKIRbU0O4HlPNZlimn3CBWArwXuZj520D1AkVismQiKy5oHL4paNt/2ux2A+8PncsNwzqP34mswO5rKo7YUcVwiRvq+7PPCTLS250FiBBseievB/bwJYtf9CjYOErah042g2BnAwZNpjORhjxv9z0MQrJfkKOIjrjDd8cfwQ0hm7g+W3J9fRnBohZKi4qRY3F2b71vYp0rIOiv3AT2ebaL8YcH5y6aP74J+H93hKerDfvLQev5QbfKS2kpsNlVaWxD6yR+hhkjO1bjG7mCeilOM5wdFHT2xiUO02zLGT+/ElikCqq9VSeTxscFSwihaP7YqU/il7D7yogCqMPdb3/A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=i/wJGI1UKmfFXXzkAyEvCpV0Yl/bp9Ab5w+XQ/+wEQs=; b=tQ6CUK4XVf/jKheQg1JXF4sr2pLBuRnIKZ3vO5Nz0LU4uWvA+mDsMiAsPUeqfNOeD8eas2TjKSkfMgfog5azNRlQtkIc5wYANIy+RkO513rlqkn60ql/UeWU4ymK9NG9+ZqHU7gbNTK8Y2eN7ZACxOkRnbyu+3ADKU1Ia3bGwgtXBN9Qqs89mCaU4u5d7j2Ve8Msn9wf6jk1vtpSmeNI8BFoUGTVp9ZDplL0Pj75idbJcxXxUMqT9b2UyOE3mcN+4TJ1/rJGZ78pzCBE0E9y+HhYgu11XdTte/zUaN/N2MwmfP7PdaXKQFKyyyzk/5oF2CL9AcGkM4kBCAjDKllbkg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=virtuozzo.com; dmarc=pass action=none header.from=virtuozzo.com; dkim=pass header.d=virtuozzo.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=virtuozzo.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=i/wJGI1UKmfFXXzkAyEvCpV0Yl/bp9Ab5w+XQ/+wEQs=; b=hVPZW+pZdur98MlU3KhtenDdWN93aQFaOczoGWjYCCQ0N6FQMqJ3G5+qfl6hUBqUpSwl96XOD/Vhi389B9vABmFCx2e7lWStaHkoJAU1FtlJMd3T2gEXxJ1Wb/EjeALQAm3Z5nq1rJGuoLiyac69luZ2/h++/6EmJ+/wkYo2olq8ckeZQ7PGTpP1jNUGqRpHBYtK3NC+JVrzGfjMmqZdvdx+x9GEK9J41CCVC4QihdH+ajjJ8v5cd0VWszvJAHOQDiml9F9X3mPHxRnSK2rD8T+EPgwdi9US+IDMm6L4avGsJHa4yH7FmBl0LbAGCxBEpY4Pc8fOPXA+WBO1i6YnMw== Authentication-Results: mx.microsoft.com 1; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=virtuozzo.com; Received: from VI0PR08MB10656.eurprd08.prod.outlook.com (2603:10a6:800:20a::12) by DU0PR08MB9774.eurprd08.prod.outlook.com (2603:10a6:10:445::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.496.14; Tue, 6 Oct 2026 15:35:57 +0000 Received: from VI0PR08MB10656.eurprd08.prod.outlook.com ([fe80::4e37:b189:ddcd:3dd8]) by VI0PR08MB10656.eurprd08.prod.outlook.com ([fe80::4e37:b189:ddcd:3dd8%7]) with mapi id 15.21.0496.010; Tue, 6 Oct 2026 15:35:56 +0000 From: Andrey Drobyshev Date: Tue, 06 Oct 2026 18:35:53 +0300 Subject: [PATCH QEMU HCI-8.0 v7 02/14] usb-host: don't leak config descriptor on claim failure #VSTOR-137800 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Message-Id: <20261006-usb-host_v3-v7-2-044f668789a1@virtuozzo.com> References: <20261006-usb-host_v3-v7-0-044f668789a1@virtuozzo.com> In-Reply-To: <20261006-usb-host_v3-v7-0-044f668789a1@virtuozzo.com> To: svt-core@virtuozzo.com Cc: den@openvz.org, andrey.drobyshev@virtuozzo.com X-Mailer: b4 0.16.0 X-ClientProxiedBy: VI5PEPF00000985.AUTP296.PROD.OUTLOOK.COM (2603:10a6:808:1::81a) To VI0PR08MB10656.eurprd08.prod.outlook.com (2603:10a6:800:20a::12) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: VI0PR08MB10656:EE_|DU0PR08MB9774:EE_ X-MS-Office365-Filtering-Correlation-Id: cc9376d2-b646-4e1f-1c80-08df23bf83b4 X-LD-Processed: 0bc7f26d-0264-416e-a6fc-8352af79c58f,ExtAddr List-Id: svt-core@virtuozzo.com X-MS-Exchange-Transport-Rules-Loop: 1 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|23010399003|1800799024|366016|376014|52116014|5113699003|56012099006|6133799003|10067099003|22082099003|18002099003|38350700014; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:VI0PR08MB10656.eurprd08.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(23010399003)(1800799024)(366016)(376014)(52116014)(5113699003)(56012099006)(6133799003)(10067099003)(22082099003)(18002099003)(38350700014);DIR:OUT;SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?YURUWDJtZGNxcDhRMnJ4TUJ2cC9xd1l4bVlBRktqejV4RTl0RVZvZUZIRWN0?= =?utf-8?B?V3hPejlxbTdvendjdFJOUlA5eG94TjRXY2g0UXNLODh4VXphZ2FOdmtGcUYy?= =?utf-8?B?b0hnRXYrV3ZiaVpFRERUOU5yYXRGdC94VWVuY2Rqc2VwckNiL3I2bjc1ZjNr?= =?utf-8?B?dFFlL09vb3dWNXJwRjFVZ3A0bVA5M2U0bHdpdEtSZkRnQzFzL0hvS3pxOUtH?= =?utf-8?B?YTc1T3B5Y2RzeDhZclcySUdRZk5KV3NreE52STJkZm1MV3NRV0JXanF4UnFo?= =?utf-8?B?ajRscE5udTIrS3dtV2h0RW0yNERaSm9PVm5rVG11TXVBbTc2WlE2V1JySjla?= =?utf-8?B?T1g2QWxsUndVQWNuU25NK09hNUZxN3ZJekxKaG5ZZEZoWkVRNjM2bnZIVjZr?= =?utf-8?B?eTNuZ0ZzWGMwb1JIU0VYSkRlLzlZWS95YmdNalVHTHl2a0NpQi9vN2RNRWtG?= =?utf-8?B?dTVPUzZ5dHhrS3ExSCtpRWg4WTlta05MQUdXRm9Idjh2V0hmU1lzUEJpSGtB?= =?utf-8?B?elhKMUdCMzRmdHVKSGt4WWpqZVJ3aWtpVHlCM21xa1J0b0NzT2pLOWdJYThK?= =?utf-8?B?Z2ZuU1VBR2RsU3M2b0FTdThhNFR5S2k0OEZLWDBsaGJJODZoNHE0OGZ0VkVB?= =?utf-8?B?Y3Zka0trckJ1SkNhdk9IRzQ4a09adWJiNi9ndEp4WHVlVldGUUZuUTlPUU8w?= =?utf-8?B?VElYU2xCc1hYSEVsZkFqdEpVekhhNUlhR1Z0d0FpanpFN0tqbXZWM25JZHhn?= =?utf-8?B?Y2NITXNiUkhSd3dRUGJFVS9OeEFMNjU3dHYxWElUeElka01KYUpqWDA5WC92?= =?utf-8?B?dFBoSmY1NmpQVlRtb3VjTVpmeGZDcU54NWFYL0tmbkNwWGFSRkdLLzM3dXhY?= =?utf-8?B?bCtrdWJxa2FYSzZPc042RDNDOVFvM29GVGxQV203OTBrc0lrak5DVjV1eWd5?= =?utf-8?B?cTJuNHJaejJ2Q0NORFNCSVM5WmtFV21oU0I5K2FvMkF0d1hTZWsxaGZlSXly?= =?utf-8?B?UXVURE9aV0RvamhnbmVVa3d0VUxDd29pUVJjK1FKaHBoc2hmbjVweE1wK2lk?= =?utf-8?B?VzUyb1pteFc2U2xPUW8wUCtDUmV0dk03aEswSEU1L0p6bnRQK2wxSnlodlVP?= =?utf-8?B?MTh2S1kwL2dSak1NaStqQkpnZUFZYkwyMHN5dEZYaFh5b2xQNjdZYy9taHNV?= =?utf-8?B?UkpJV3VXUzJxVkVVWms3MkpVc1lNQWJ3MjUvN2IwRGFTUG9YWEF6QlNnYk5I?= =?utf-8?B?ZWpaYTV2VnZXa3I5UWxuTUJvYkFJTjR1cGo1dlVnbWM5ZWNRcWNxSWJ0R2Jn?= =?utf-8?B?YXdrTVVhMVRpaUFlZXV3cFA0Ni9sYW9nb2NrMURqVkdWdzhJdGl5Si8za3ND?= =?utf-8?B?TTQ5bGVvUkp3T3dPK0l0TTVCekJ3a1JybENqV0NIYkQzSHMwWlFkTTRvVHZF?= =?utf-8?B?N0hiZ2tvWisxUlI4MXp3Tm45MlZNanRPMVRPcmdjZ2prTGlOTy9pd2c5RFND?= =?utf-8?B?ZEJXMU4zZDJEcGsrQkh5RVgxSWZmMkpybmJ1eXFtRkhrdzFaZkU5VmMweUls?= =?utf-8?B?NXFVd2hnUTN6YUpRdVFSZEErclowekpLUFk3WUhvUlFoc2JlRXNIbTl4RDBj?= =?utf-8?B?NitGZ3MwNk02S1ZoSHZ1ZW9jbVN0Smd5TGJ6ZGE2MnhBK2hSREIrSVFXRUJw?= =?utf-8?B?UHppcmRNak5UWlFhdFcwajFrMEFhUWNNaVFDSDFBdlJnZmJDajFvV2pDSDlT?= =?utf-8?B?Z1RVb1Q4SEJxamkzTXp6WUFGakMwUmMvSEFqM2RYQlNySVBKL1ZmbXUvSkpI?= =?utf-8?B?ckR3MjBFdjl2NjJGY0I2VjdjQ3pWdzVGdVFKU0x3V0JBV2t1NExyUW9lOXFC?= =?utf-8?B?aFRWZUYxUUgwVFFVTzNwMmlPTXBqQTl0NldxYjNYWHFid09Rbkk2YmVYQlJY?= =?utf-8?B?LzVRUlduL0xnd0FIUFV1dWMxcXUzSU1DNXF2UmNSVllSVUtyZ1pra1lweUxS?= =?utf-8?B?UHBLckw2cUJTSG1KU3E1WnBvYzE3WUFvZURxdzRDOHBBTlNZR1JibFJiMlpS?= =?utf-8?B?Wjdua1RFNXB4bmRRWFNjZlhmc25JS2lhRnpSMDZCcFVDQVFIUnhWRXk5SFd3?= =?utf-8?B?UFZsME9VbWtTTU9LSytBK3F1Zm9BY3BQL3p1SkpzQkFmazQzcDZRTWsrVWZY?= =?utf-8?B?WGZhOStNcHhWV1E3MVg5YzBwQkpMWktVVGVMeFRHMEhudjdDdmdaN2NTbTZV?= =?utf-8?B?QlliNkFFUzVDWkprN3V1QlU0dTVxOHB6dUlQWHZQZ0Rsek1IcHBPUkpIUzNl?= =?utf-8?B?OTMyMTcxZk50VkpPUzYyWExDczVDRzQ4YityUll1R2lvSERyWkszMVVQZStS?= =?utf-8?Q?ZMSk14xx1t0uKvXQ=3D?= X-OriginatorOrg: virtuozzo.com X-MS-Exchange-CrossTenant-Network-Message-Id: cc9376d2-b646-4e1f-1c80-08df23bf83b4 X-MS-Exchange-CrossTenant-AuthSource: VI0PR08MB10656.eurprd08.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 Oct 2026 15:35:56.6247 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 0bc7f26d-0264-416e-a6fc-8352af79c58f X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: /Cp7wijIYX4MNbXlTFH2MX4CQeF8x5aOhPA4bXkjYRPNlOVIH9begQARKjSy1RsUGnv666hdX5J0fq900914stmHE8XrnxsOrITV0zJGgsA= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU0PR08MB9774 usb_host_claim_interfaces() fetches the active config descriptor but frees it only on the success path. When not every interface can be claimed it returns USB_RET_STALL without freeing it, leaking the descriptor. Free it before the error return. Fixes: 896b6757f9c4 ("usb-host: support devices with sparse/non-sequential USB interfaces") Signed-off-by: Andrey Drobyshev --- hw/usb/host-libusb.c | 1 + 1 file changed, 1 insertion(+) diff --git a/hw/usb/host-libusb.c b/hw/usb/host-libusb.c index d4a8c68e6d4..7c8b65ad5af 100644 --- a/hw/usb/host-libusb.c +++ b/hw/usb/host-libusb.c @@ -1381,6 +1381,7 @@ static int usb_host_claim_interfaces(USBHostDevice *s, int configuration) } } if (claimed != conf->bNumInterfaces) { + libusb_free_config_descriptor(conf); return USB_RET_STALL; } -- 2.47.1