peeweep/libvirt
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix one crash in the the error handling for CVE-2011-1146

Browse Source
This commit is contained in:
Daniel Veillard
2011-03-16 17:04:44 +08:00
parent 00d22f3bca
commit 57678681d5
2 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
libvirt-0.8.2-read-only-checks.patch
+1 -1
View File
@@ -29,7 +29,7 @@ Rebased to 0.8.2, mostly changed the call of the error routines
return (NULL);
}
+ if (conn->flags & VIR_CONNECT_RO) {
+ virLibDomainError(NULL, VIR_ERR_OPERATION_DENIED, __FUNCTION__);
+ virLibConnError(NULL, VIR_ERR_OPERATION_DENIED, __FUNCTION__);
+ goto error;
+ }
libvirt.spec
+4 -1
View File
@@ -185,7 +185,7 @@
Summary: Library providing a simple API virtualization
Name: libvirt
Version: 0.8.2
Release: 2%{?dist}%{?extra_release}
Release: 3%{?dist}%{?extra_release}
License: LGPLv2+
Group: Development/Libraries
Source: http://libvirt.org/sources/libvirt-%{version}.tar.gz
@@ -940,6 +940,9 @@ fi
%endif
%changelog
* Wed Mar 16 2011 Daniel Veillard <veillard@redhat.com> - 0.8.2-3
- fix one crash in the the error handling for previous patch
* Tue Mar 15 2011 Daniel Veillard <veillard@redhat.com> - 0.8.2-2
- Fix for CVE-2011-1146, missing checks on read-only connections bug 683655