packages/libvirt
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Bugfix: remote_driver: fix the UAF causing "UnicodeDecodeError: 'uft-8' codec can't decode byte XXX"

Browse Source 
(cherry picked from commit dc925a159206c499c80ac363e208a2a16f12bcf8)
This commit is contained in:
caozhongwang 2024-05-18 19:07:20 +08:00 committed by openeuler-sync-bot
parent 1680f5a23e
commit 92cb5cceb9
2 changed files with 35 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
libvirt.spec
View File

@ -262,7 +262,7 @@
Summary: Library providing a simple virtualization API Summary: Library providing a simple virtualization API
Name: libvirt Name: libvirt
Version: 9.10.0 Version: 9.10.0
Release: 9 Release: 10
License: LGPLv2+ License: LGPLv2+
URL: https://libvirt.org/ URL: https://libvirt.org/
@ -314,7 +314,8 @@ Patch0040: Fix-off-by-one-error-in-udevListInterfacesByStatus.patch
Patch0041: remote-check-for-negative-array-lengths-before-alloc.patch Patch0041: remote-check-for-negative-array-lengths-before-alloc.patch
Patch0042: hotpatch-if-hotpatch_path-not-in-qemu.conf-the-hotpa.patch Patch0042: hotpatch-if-hotpatch_path-not-in-qemu.conf-the-hotpa.patch
Patch0043: remote_driver-Restore-special-behavior-of-remoteDoma.patch Patch0043: remote_driver-Restore-special-behavior-of-remoteDoma.patch
Patch0044: rpc-ensure-temporary-GSource-is-removed-from-client-.patch Patch0044: remote_driver-fix-the-UAF-causing-UnicodeDecodeError.patch
Patch0045: rpc-ensure-temporary-GSource-is-removed-from-client-.patch
Requires: libvirt-daemon = %{version}-%{release} Requires: libvirt-daemon = %{version}-%{release}
Requires: libvirt-daemon-config-network = %{version}-%{release} Requires: libvirt-daemon-config-network = %{version}-%{release}
@ -2606,9 +2607,13 @@ exit 0
%endif %endif
%changelog %changelog
* Fri May 24 2024 jiangjiacheng <jiangjiacheng@huawei.com> - 9.10.0-9
* Fri May 24 2024 jiangjiacheng <jiangjiacheng@huawei.com> - 9.10.0-10
- rpc: ensure temporary GSource is removed from client event loop - rpc: ensure temporary GSource is removed from client event loop
* SAT May 18 2024 QingXiu <xiuqing1@huawei.com> 9.10.0-9
- spec: remote_driver: fix the UAF causing UnicodeDecodeError
* Mon May 06 2024 laokz <zhangkai@iscas.ac.cn> - 9.10.0-8 * Mon May 06 2024 laokz <zhangkai@iscas.ac.cn> - 9.10.0-8
- spec: enable libvirt-daemon-kvm sub-package for riscv64 - spec: enable libvirt-daemon-kvm sub-package for riscv64

27
remote_driver-fix-the-UAF-causing-UnicodeDecodeError.patch Normal file
View File

@ -0,0 +1,27 @@
From 10ec4fa6e9f1e6c72f2d7a1025d1e200ce94f8b0 Mon Sep 17 00:00:00 2001
From: caozhongwang <caozhongwang1@huawei.com>
Date: Sat, 18 May 2024 17:05:07 +0800
Subject: [PATCH] remote_driver: fix the UAF causing "UnicodeDecodeError:
'utf-8' codec can't decode byte XXX".
Signed-off-by:xiuqing1 <xiuqing1@huawei.com>
---
src/remote/remote_driver.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/src/remote/remote_driver.c b/src/remote/remote_driver.c
index a1a0edd7a2..9350e811d6 100644
--- a/src/remote/remote_driver.c
+++ b/src/remote/remote_driver.c
@@ -1408,7 +1408,7 @@ remoteConnectGetType(virConnectPtr conn)
return NULL;
/* Stash. */
- return priv->type = ret.type;
+ return priv->type = g_steal_pointer(&ret.type);
}
static int remoteConnectIsSecure(virConnectPtr conn)
--
2.27.0