[libvirt] [PATCH 06/10] Fix allocation of arglist in qemuStringToArgvEnv

Peter Krempa pkrempa at redhat.com
Mon Sep 23 17:01:58 UTC 2013


On 09/23/13 15:23, Daniel P. Berrange wrote:
> From: "Daniel P. Berrange" <berrange at redhat.com>
> 
> In
> 
>   commit 41b550567918790cb304378f39c3ba369bcca28e
>   Author: Eric Blake <eblake at redhat.com>
>   Date:   Wed Aug 28 15:01:23 2013 -0600
> 
>     qemu: simplify list cleanup
> 
> The qemuStringToArgvEnv method was changed to use virStringFreeList
> to free the 'arglist' array. This method assumes the string list
> array is NULL terminated, however, qemuStringToArgvEnv was not
> ensuring this when populating 'arglist'. This caused an out of
> bounds access by virStringFreeList when OOM occured in the initial
> loop of qemuStringToArgvEnv
> 
> Signed-off-by: Daniel P. Berrange <berrange at redhat.com>
> ---
>  src/qemu/qemu_command.c | 16 +++++++---------
>  1 file changed, 7 insertions(+), 9 deletions(-)

ACK,

Peter



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 901 bytes
Desc: OpenPGP digital signature
URL: <http://listman.redhat.com/archives/libvir-list/attachments/20130923/97d4d2be/attachment-0001.sig>


More information about the libvir-list mailing list