[Xen-changelog] [xen stable-4.3] libxl: fix out-of-memory error handling in libxl_list_cpupool

[patchbot@xxxxxxx]

commit 2350e70ee06c903a927340f7a0bf9ca25acce3f3
Author:     Matthew Daley <mattjd@xxxxxxxxx>
AuthorDate: Tue Sep 10 22:18:46 2013 +1200
Commit:     Ian Jackson <Ian.Jackson@xxxxxxxxxxxxx>
CommitDate: Thu Oct 10 16:06:21 2013 +0100

    libxl: fix out-of-memory error handling in libxl_list_cpupool
    
    ...otherwise it will return freed memory. All the current users of this
    function check already for a NULL return, so use that.
    
    Coverity-ID: 1056194
    
    This is CVE-2013-4371 / XSA-70
    
    Signed-off-by: Matthew Daley <mattjd@xxxxxxxxx>
    Acked-by: Ian Campbell <ian.campbell@xxxxxxxxxx>
    (cherry picked from commit 4c37ed562224295c0f8b00211287d57cae629782)
---
 tools/libxl/libxl.c |    1 +
 1 files changed, 1 insertions(+), 0 deletions(-)

diff --git a/tools/libxl/libxl.c b/tools/libxl/libxl.c
index dcb3df9..826236f 100644
--- a/tools/libxl/libxl.c
+++ b/tools/libxl/libxl.c
@@ -649,6 +649,7 @@ libxl_cpupoolinfo * libxl_list_cpupool(libxl_ctx *ctx, int 
*nb_pool_out)
         if (!tmp) {
             LIBXL__LOG_ERRNO(ctx, LIBXL__LOG_ERROR, "allocating cpupool info");
             libxl_cpupoolinfo_list_free(ptr, i);
+            ptr = NULL;
             goto out;
         }
         ptr = tmp;
--
generated by git-patchbot for /home/xen/git/xen.git#stable-4.3

_______________________________________________
Xen-changelog mailing list
Xen-changelog@xxxxxxxxxxxxx
http://lists.xensource.com/xen-changelog