From fbba7c404875d3e2e9f4a6d08ccc53014c091c37 Mon Sep 17 00:00:00 2001 Message-Id: From: Chen Hanxiao Date: Tue, 18 Feb 2014 15:45:28 -0700 Subject: [PATCH] LXC: free dst before lxcDomainAttachDeviceDiskLive returns https://bugzilla.redhat.com/show_bug.cgi?id=1045643 prereq of CVE-2013-6456 Free dst before lxcDomainAttachDeviceDiskLive returns Signed-off-by: Chen Hanxiao (cherry picked from commit c82513acc2e1e0b035e5e53577a34fd68a530788) Signed-off-by: Jiri Denemark --- src/lxc/lxc_driver.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/lxc/lxc_driver.c b/src/lxc/lxc_driver.c index cf7b62c..a6efaa4 100644 --- a/src/lxc/lxc_driver.c +++ b/src/lxc/lxc_driver.c @@ -3177,6 +3177,7 @@ cleanup: virDomainAuditDisk(vm, NULL, def->src, "attach", ret == 0); if (dst && created && ret < 0) unlink(dst); + VIR_FREE(dst); return ret; } -- 1.9.0