libvirt

NuKVM/libvirt

0 Fork 0

mirror of https://github.com/libvirt/libvirt.git synced 2026-10-02 12:20:06 -05:00

Files

T

Peter Krempa 8dfb12cb77 udevListInterfaces: Honour array length for zero-length NULL arrays (CVE-2024-8235)

The refactor of 'udevListInterfacesByStatus()' which attempted to make
it usable as backend for 'udevNumOfInterfacesByStatus()' neglected to
consider the corner case of 'g_new0(..., 0)' returning NULL if the user
actually requests 0 elements.

As the code was modified to report the full number of interfaces in the
system when the list of names is NULL, the RPC code would be asked to
serialize a NULL-list of interface names with declared lenth of 1+
causing a crash.

To fix this corner case we make callers pass '-1' as @names_len (it's
conveniently an 'int' due to RPC type usage) if they don't wish to fetch
the actual list and convert all decisions to be done on @names_len being
non-negative instead of @names being non-NULL.

CVE-2024-8235

Fixes: bc596f2751
Resolves: https://issues.redhat.com/browse/RHEL-55373
Reported-by: Yanqiu Zhang  <yanqzhan@redhat.com>
Signed-off-by: Peter Krempa <pkrempa@redhat.com>
Reviewed-by: Martin Kletzander <mkletzan@redhat.com>

2024-08-29 10:38:40 +02:00

interface_backend_netcf.c

src: Fix return types of .stateInitialize callbacks

2024-05-22 13:41:42 +02:00

interface_backend_udev.c

udevListInterfaces: Honour array length for zero-length NULL arrays (CVE-2024-8235)

2024-08-29 10:38:40 +02:00

interface_driver.c

Use K&R style for curly braces in remaining files

2014-03-20 17:27:17 +01:00

interface_driver.h

src/interface: use #pragma once in headers