Daniel P. Berrange 2f34eae93a Fix crash in remoteDispatchDomainMemoryStats (CVE-2013-4296) ...

The 'stats' variable was not initialized to NULL, so if some
early validation of the RPC call fails, it is possible to jump
to the 'cleanup' label and VIR_FREE an uninitialized pointer.
This is a security flaw, since the API can be called from a
readonly connection which can trigger the validation checks.

This was introduced in release v0.9.1 onwards by

  commit 158ba8730e44b7dd07a21ab90499996c5dec080a
  Author: Daniel P. Berrange <berrange@redhat.com>
  Date:   Wed Apr 13 16:21:35 2011 +0100

    Merge all returns paths from dispatcher into single path

Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
(cherry picked from commit e7f400a110e2e3673b96518170bfea0855dd82c0)

Conflicts:
	daemon/remote.c - context

2013-09-18 21:10:27 -06:00

..

libvirtd-config.c

daemon: Plug memory leaks

2012-04-12 17:30:49 +08:00

libvirtd-config.h

Add API for loading daemon config from in-memory blob

2012-04-10 11:11:12 +01:00

libvirtd.aug

Implement keepalive protocol in libvirt daemon

2011-11-24 11:44:08 +01:00

libvirtd.c

Move virProcess{Kill, Abort, TranslateStatus} into virprocess.{c, h}

2013-09-18 21:10:23 -06:00

libvirtd.conf

Change the default of mdns_adv to false

2012-03-27 09:54:49 -06:00

libvirtd.h

API: make declaration of _LAST enum values conditional

2012-01-20 16:05:51 -07:00

libvirtd.init.in

daemon: Remove deprecated HAL from init script dependencies

2012-03-02 16:32:37 +01:00

libvirtd.logrotate.in

Add logrotate support for libvirtd.log

2011-03-04 22:43:55 +08:00

libvirtd.lxc.logrotate.in

Change logrotate to be per-hypervisor logs

2010-03-10 11:27:02 +01:00

libvirtd.pod.in

docs: removed outdated reference to virt-mem

2010-11-23 01:11:10 +11:00

libvirtd.policy-0

Allow polkit auth for VNC and SSH users

2012-02-07 11:59:35 -05:00

libvirtd.policy-1

Allow polkit auth for VNC and SSH users

2012-02-07 11:59:35 -05:00

libvirtd.qemu.logrotate.in

Change logrotate to be per-hypervisor logs

2010-03-10 11:27:02 +01:00

libvirtd.sasl

…

libvirtd.service.in

Leave all child processes running when stopping systemd service

2012-03-23 12:46:16 +00:00

libvirtd.sysconf

daemon: Allow overriding NOFILES ulimit for the daemon as well

2012-02-01 16:04:30 +01:00

libvirtd.sysctl

init: raise default system aio limits

2011-10-05 14:49:35 -06:00

libvirtd.uml.logrotate.in

Change logrotate to be per-hypervisor logs

2010-03-10 11:27:02 +01:00

libvirtd.upstart

daemon: Allow overriding NOFILES ulimit for the daemon as well

2012-02-01 16:04:30 +01:00

Makefile.am

The policy kit and HAL node device drivers both require a

2012-04-19 17:03:10 +01:00

remote.c

Fix crash in remoteDispatchDomainMemoryStats (CVE-2013-4296)

2013-09-18 21:10:27 -06:00

remote.h

Remove unused virNetServerProgramErrorHander typedef

2011-07-13 11:47:01 +01:00

stream.c

maint: fix improper use of 'an'

2011-12-03 17:11:56 -07:00

stream.h

Ensure client streams are closed when marking a client for close

2011-08-16 14:38:11 -07:00

test_libvirtd.aug

Change the default of mdns_adv to false

2012-03-27 09:54:49 -06:00

THREADS.txt

maint: use consistent file name for threading notes

2011-05-31 13:54:45 -06:00