From 57678681d5e37a71c4cb88fd23c319d87517cec8 Mon Sep 17 00:00:00 2001 From: Daniel Veillard Date: Wed, 16 Mar 2011 17:04:44 +0800 Subject: [PATCH] fix one crash in the the error handling for CVE-2011-1146 --- libvirt-0.8.2-read-only-checks.patch | 2 +- libvirt.spec | 5 ++++- 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/libvirt-0.8.2-read-only-checks.patch b/libvirt-0.8.2-read-only-checks.patch index 76cce55..39167f7 100644 --- a/libvirt-0.8.2-read-only-checks.patch +++ b/libvirt-0.8.2-read-only-checks.patch @@ -29,7 +29,7 @@ Rebased to 0.8.2, mostly changed the call of the error routines return (NULL); } + if (conn->flags & VIR_CONNECT_RO) { -+ virLibDomainError(NULL, VIR_ERR_OPERATION_DENIED, __FUNCTION__); ++ virLibConnError(NULL, VIR_ERR_OPERATION_DENIED, __FUNCTION__); + goto error; + } diff --git a/libvirt.spec b/libvirt.spec index ceec7cc..a9fade6 100644 --- a/libvirt.spec +++ b/libvirt.spec @@ -185,7 +185,7 @@ Summary: Library providing a simple API virtualization Name: libvirt Version: 0.8.2 -Release: 2%{?dist}%{?extra_release} +Release: 3%{?dist}%{?extra_release} License: LGPLv2+ Group: Development/Libraries Source: http://libvirt.org/sources/libvirt-%{version}.tar.gz @@ -940,6 +940,9 @@ fi %endif %changelog +* Wed Mar 16 2011 Daniel Veillard - 0.8.2-3 +- fix one crash in the the error handling for previous patch + * Tue Mar 15 2011 Daniel Veillard - 0.8.2-2 - Fix for CVE-2011-1146, missing checks on read-only connections bug 683655