[libvirt] [PATCH] daemon: fix leak after listing all volumes

Ján Tomko jtomko at redhat.com
Thu May 16 14:03:22 UTC 2013


CVE-2013-1962

remoteDispatchStoragePoolListAllVolumes wasn't freeing the pool.
The pool also held a reference to the connection, preventing it from
getting freed and closing the netcf interface driver, which held two
sockets open.
---
 daemon/remote.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/daemon/remote.c b/daemon/remote.c
index 1d21478..af89e60 100644
--- a/daemon/remote.c
+++ b/daemon/remote.c
@@ -4202,6 +4202,8 @@ cleanup:
             virStorageVolFree(vols[i]);
         VIR_FREE(vols);
     }
+    if (pool)
+        virStoragePoolFree(pool);
     return rv;
 }
 
-- 
1.8.1.5




More information about the libvir-list mailing list