[libvirt] [PATCH] libxl: avoid crashing if calling `virsh numatune' on inactive domain

[Doug Goldstein]

On Tue, Dec 24, 2013 at 12:02 AM, Eric Blake <eblake at redhat.com> wrote:
> On 12/20/2013 11:36 AM, Jim Fehlig wrote:
>> Dario Faggioli wrote:
>>> by, in libxlDomainGetNumaParameters(), calling libxl_bitmap_init() as soon as
>>> possible, which avoids getting to 'cleanup:', where libxl_bitmap_dispose()
>>> happens, without having initialized the nodemap, and hence crashing after some
>>> invalid free()-s:
>>>
>>
>> Yikes!  ACK to the fix.  I've pushed it.
>
> This has been assigned CVE-6457; we'll get it tagged in libvirt.git and
> make sure it is backported to relevant branches once I've got more time
> (may be in 2014).
>

I'll help you out and get started on this. Family is in town around
the holidays so no promises I'll get them all done if its not too
trivial.

-- 
Doug Goldstein