Blame SOURCES/libvirt-virDomainConfNWFilterInstantiate-initialize-xml-to-avoid-random-crash.patch

9c6c51
From 0f3ca7bcaaec337a672b3a0660c0ceda5f55d807 Mon Sep 17 00:00:00 2001
9c6c51
Message-Id: <0f3ca7bcaaec337a672b3a0660c0ceda5f55d807@dist-git>
9c6c51
From: Luyao Huang <lhuang@redhat.com>
9c6c51
Date: Wed, 11 Jul 2018 17:29:48 +0200
9c6c51
Subject: [PATCH] virDomainConfNWFilterInstantiate: initialize @xml to avoid
9c6c51
 random crash
9c6c51
MIME-Version: 1.0
9c6c51
Content-Type: text/plain; charset=UTF-8
9c6c51
Content-Transfer-Encoding: 8bit
9c6c51
9c6c51
https://bugzilla.redhat.com/show_bug.cgi?id=1599545
9c6c51
9c6c51
If the code jump to the cleanup before assigning value to @xml
9c6c51
libvirtd may crash when it tries to free an uninitialized pointer.
9c6c51
9c6c51
backtrace:
9c6c51
9c6c51
0  0x00007ffff428d59c in free () from /lib64/libc.so.6
9c6c51
1  0x00007ffff721314a in virFree (ptrptr=ptrptr@entry=0x7fffc67f1b00) at util/viralloc.c:582
9c6c51
2  0x00007ffff7345ac4 in virDomainConfNWFilterInstantiate (vmname=<optimized out>,
9c6c51
   vmuuid=vmuuid@entry=0x7fffc0181ca8 "߉\237\\۔H\262\206z\340\302f\265\233z", net=<optimized out>,
9c6c51
   ignoreExists=ignoreExists@entry=true) at conf/domain_nwfilter.c:122
9c6c51
3  0x00007fffca5a77f6 in qemuProcessFiltersInstantiate (ignoreExists=true, def=0x7fffc0181ca0) at qemu/qemu_process.c:3028
9c6c51
4  qemuProcessReconnect (opaque=<optimized out>) at qemu/qemu_process.c:7653
9c6c51
5  0x00007ffff72c4895 in virThreadHelper (data=<optimized out>) at util/virthread.c:206
9c6c51
6  0x00007ffff45dcdd5 in start_thread () from /lib64/libpthread.so.0
9c6c51
7  0x00007ffff4305ead in clone () from /lib64/libc.so.6
9c6c51
9c6c51
Signed-off-by: Luyao Huang <lhuang@redhat.com>
9c6c51
(cherry picked from commit d7557f5f6f51264c1b5623e97f7b4d5259d4d3b6)
9c6c51
Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
9c6c51
Reviewed-by: Ján Tomko <jtomko@redhat.com>
9c6c51
---
9c6c51
 src/conf/domain_nwfilter.c | 2 +-
9c6c51
 1 file changed, 1 insertion(+), 1 deletion(-)
9c6c51
9c6c51
diff --git a/src/conf/domain_nwfilter.c b/src/conf/domain_nwfilter.c
9c6c51
index 948b32481e..24b5f42ddd 100644
9c6c51
--- a/src/conf/domain_nwfilter.c
9c6c51
+++ b/src/conf/domain_nwfilter.c
9c6c51
@@ -90,7 +90,7 @@ virDomainConfNWFilterInstantiate(const char *vmname,
9c6c51
     virConnectPtr conn = virGetConnectNWFilter();
9c6c51
     virNWFilterBindingDefPtr def = NULL;
9c6c51
     virNWFilterBindingPtr binding = NULL;
9c6c51
-    char *xml;
9c6c51
+    char *xml = NULL;
9c6c51
     int ret = -1;
9c6c51
 
9c6c51
     VIR_DEBUG("vmname=%s portdev=%s filter=%s ignoreExists=%d",
9c6c51
-- 
9c6c51
2.18.0
9c6c51