[libvirt] [PATCH] libxl: avoid crashing if calling `virsh numatune' on inactive domain

Doug Goldstein cardoe at gentoo.org
Sat Dec 28 23:35:26 UTC 2013

On Sat, Dec 28, 2013 at 3:18 PM, Doug Goldstein <cardoe at gentoo.org> wrote:
> On Tue, Dec 24, 2013 at 12:02 AM, Eric Blake <eblake at redhat.com> wrote:
>> On 12/20/2013 11:36 AM, Jim Fehlig wrote:
>>> Dario Faggioli wrote:
>>>> by, in libxlDomainGetNumaParameters(), calling libxl_bitmap_init() as soon as
>>>> possible, which avoids getting to 'cleanup:', where libxl_bitmap_dispose()
>>>> happens, without having initialized the nodemap, and hence crashing after some
>>>> invalid free()-s:
>>> Yikes!  ACK to the fix.  I've pushed it.
>> This has been assigned CVE-6457; we'll get it tagged in libvirt.git and
>> make sure it is backported to relevant branches once I've got more time
>> (may be in 2014).
> I'll help you out and get started on this. Family is in town around
> the holidays so no promises I'll get them all done if its not too
> trivial.
> --
> Doug Goldstein

The fix has been back ported to:


This should cover all affected versions per Jim's analysis.

Let me know if anything further needs to be done.
Doug Goldstein

More information about the libvir-list mailing list