libvirt/src/libxl
Jim Fehlig 720be2eb5f libxl: fix double-free of libxl_domain_build_info
On error, libxlMakeDomBuildInfo() frees the caller-provided
libxl_domain_build_info struct embedded in libxl_domain_config,
causing a segfault

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7f9c13020700 (LWP 40988)]
(gdb) bt
0  0x00007f9c162f95b4 in free () from /lib64/libc.so.6
1  0x00007f9c0d0965ad in libxl_bitmap_dispose () from
   /usr/lib64/libxenlight.so.4.4
2  0x00007f9c0d0a73bf in libxl_domain_build_info_dispose ()
   from /usr/lib64/libxenlight.so.4.4
3  0x00007f9c0d0a7974 in libxl_domain_config_dispose () from
   /usr/lib64/libxenlight.so.4.4
4  0x00007f9c0d2e00c5 in libxlDomainStart (driver=0x7f9c0400e4e0,
   vm=0x7f9c0412b0d0, start_paused=false, restore_fd=-1) at
   libxl/libxl_domain.c:1323
5  0x00007f9c0d2e1d4b in libxlDomainCreateXML (conn=0x7f9c000009a0,...)
   at libxl/libxl_driver.c:660

Remove the call to libxl_domain_build_info_dispose() from
libxlMakeDomBuildInfo().  On error, callers will dispose the
libxl_domain_config object, which in turn disposes the build info.
2014-10-30 10:23:18 -06:00
..
libxl_conf.c libxl: fix double-free of libxl_domain_build_info 2014-10-30 10:23:18 -06:00
libxl_conf.h libxl: Add function to determine device model type 2014-10-10 15:08:40 -06:00
libxl_domain.c libxl: add missing 'break' from commit 1298daca 2014-10-16 12:42:13 -06:00
libxl_domain.h libxl: add migration support 2014-06-04 21:01:07 -06:00
libxl_driver.c maint: avoid static zero init in drivers 2014-10-29 09:55:09 -06:00
libxl_driver.h libxl: Use standard format for source file copyright notice 2013-09-03 23:53:48 -06:00
libxl_migration.c libxl: Resolve Coverity NULL_RETURNS 2014-09-11 08:10:14 -04:00
libxl_migration.h libxl: remove domain when migration prepare fails 2014-07-08 17:14:50 -06:00