Bug 631502

Summary: spice: qxl overruns the release ring
Product: Red Hat Enterprise Linux 6 Reporter: Gerd Hoffmann <kraxel>
Component: qemu-kvmAssignee: Gerd Hoffmann <kraxel>
Status: CLOSED NOTABUG QA Contact: Virtualization Bugs <virt-bugs>
Severity: medium Docs Contact:
Priority: low    
Version: 6.0CC: jkurik, llim, mkenneth, plyons, virt-maint
Target Milestone: rc   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
: 631509 (view as bug list) Environment:
Last Closed: 2010-09-09 09:47:35 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 631509    
Attachments:
Description Flags
fix none

Description Gerd Hoffmann 2010-09-07 19:46:32 UTC 
Description of problem:
The qxl backend in qemu can overrun the release ring.  The result is that the guest will miss release events, thus will not release the qxl device memory associated with them.  The memory leak may make qxl go out of memory and stop working.

Version-Release number of selected component (if applicable):
qemu-kvm-0.12.1.2-2.113.el6.x86_64

How reproducible:
No reproducer, found by code review.
Comment 1 Gerd Hoffmann 2010-09-07 19:49:04 UTC 
Created attachment 445768 [details]
fix
Comment 4 Gerd Hoffmann 2010-09-09 09:47:35 UTC 
Patch review figured the current code is correct as-is.