Daniel P. Berrange 95983486d9 Fix crash in remoteDispatchDomainMemoryStats (CVE-2013-4296) ...

The 'stats' variable was not initialized to NULL, so if some
early validation of the RPC call fails, it is possible to jump
to the 'cleanup' label and VIR_FREE an uninitialized pointer.
This is a security flaw, since the API can be called from a
readonly connection which can trigger the validation checks.

This was introduced in release v0.9.1 onwards by

  commit 158ba8730e44b7dd07a21ab90499996c5dec080a
  Author: Daniel P. Berrange <berrange@redhat.com>
  Date:   Wed Apr 13 16:21:35 2011 +0100

    Merge all returns paths from dispatcher into single path

Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
(cherry picked from commit e7f400a110e2e3673b96518170bfea0855dd82c0)

Conflicts:
	daemon/remote.c - context

2013-09-18 14:33:24 -06:00

..

libvirtd-config.c

Rename HAVE_POLKIT to WITH_POLKIT

2013-01-14 13:29:55 +00:00

libvirtd-config.h

maint: fix up copyright notice inconsistencies

2012-09-20 16:30:55 -06:00

libvirtd.aug

Fix mistakes in augeas lens

2012-05-28 11:00:01 +01:00

libvirtd.c

call virstateCleanup to do the cleanup before libvirtd exits

2013-01-16 17:18:59 -07:00

libvirtd.conf

Various typos and misspellings

2012-10-12 00:03:43 +02:00

libvirtd.h

Implement the RPC protocol for the libvirt-lxc.la library

2013-01-15 18:16:53 +00:00

libvirtd.init.in

daemon: Remove deprecated HAL from init script dependencies

2012-03-02 16:32:37 +01:00

libvirtd.logrotate.in

Add logrotate support for libvirtd.log

2011-03-04 22:43:55 +08:00

libvirtd.lxc.logrotate.in

Change logrotate to be per-hypervisor logs

2010-03-10 11:27:02 +01:00

libvirtd.pod.in

Update paths in man page to reflect libvirtd code

2012-08-15 21:40:39 +08:00

libvirtd.policy.in

daemon: Make the default PolicyKit policy auth_admin_keep.

2012-11-01 13:17:26 +00:00

libvirtd.qemu.logrotate.in

Change logrotate to be per-hypervisor logs

2010-03-10 11:27:02 +01:00

libvirtd.sasl

daemon: Avoid 'Could not find keytab file' in syslog

2012-10-21 13:21:07 -04:00

libvirtd.service.in

libvirt does not logout of iscsi targets, causing system hang on shutdown

2013-03-04 06:28:57 -07:00

libvirtd.sysconf

daemon: Allow overriding NOFILES ulimit for the daemon as well

2012-02-01 16:04:30 +01:00

libvirtd.sysctl

init: raise default system aio limits

2011-10-05 14:49:35 -06:00

libvirtd.uml.logrotate.in

Change logrotate to be per-hypervisor logs

2010-03-10 11:27:02 +01:00

libvirtd.upstart

daemon: Allow overriding NOFILES ulimit for the daemon as well

2012-02-01 16:04:30 +01:00

Makefile.am

Enable full RELRO mode

2013-04-09 13:55:20 -06:00

remote.c

Fix crash in remoteDispatchDomainMemoryStats (CVE-2013-4296)

2013-09-18 14:33:24 -06:00

remote.h

Implement the RPC protocol for the libvirt-lxc.la library

2013-01-15 18:16:53 +00:00

stream.c

Rename virterror.c virterror_internal.h to virerror.{c,h}

2012-12-21 11:19:50 +00:00

stream.h

maint: fix up copyright notice inconsistencies

2012-09-20 16:30:55 -06:00

test_libvirtd.aug.in

Autogenerate augeas test case from default config files

2012-05-28 11:07:12 +01:00

THREADS.txt

maint: use consistent file name for threading notes

2011-05-31 13:54:45 -06:00