[Xen-changelog] [xen master] libxl: fix out-of-memory error handling in libxl_list_cpupool

[patchbot@xxxxxxx]

commit 4c37ed562224295c0f8b00211287d57cae629782
Author:     Matthew Daley <mattjd@xxxxxxxxx>
AuthorDate: Tue Sep 10 22:18:46 2013 +1200
Commit:     Ian Jackson <Ian.Jackson@xxxxxxxxxxxxx>
CommitDate: Thu Oct 10 15:49:54 2013 +0100

    libxl: fix out-of-memory error handling in libxl_list_cpupool
    
    ...otherwise it will return freed memory. All the current users of this
    function check already for a NULL return, so use that.
    
    Coverity-ID: 1056194
    
    This is CVE-2013-4371 / XSA-70
    
    Signed-off-by: Matthew Daley <mattjd@xxxxxxxxx>
    Acked-by: Ian Campbell <ian.campbell@xxxxxxxxxx>
---
 tools/libxl/libxl.c |    1 +
 1 files changed, 1 insertions(+), 0 deletions(-)

diff --git a/tools/libxl/libxl.c b/tools/libxl/libxl.c
index b6dacea..29e66f2 100644
--- a/tools/libxl/libxl.c
+++ b/tools/libxl/libxl.c
@@ -654,6 +654,7 @@ libxl_cpupoolinfo * libxl_list_cpupool(libxl_ctx *ctx, int 
*nb_pool_out)
         if (!tmp) {
             LIBXL__LOG_ERRNO(ctx, LIBXL__LOG_ERROR, "allocating cpupool info");
             libxl_cpupoolinfo_list_free(ptr, i);
+            ptr = NULL;
             goto out;
         }
         ptr = tmp;
--
generated by git-patchbot for /home/xen/git/xen.git#master

_______________________________________________
Xen-changelog mailing list
Xen-changelog@xxxxxxxxxxxxx
http://lists.xensource.com/xen-changelog