[libvirt] CVE-2013-6457 Re: [PATCH] libxl: avoid crashing if calling `virsh numatune' on inactive domain

On 12/20/2013 11:36 AM, Jim Fehlig wrote: > Dario Faggioli wrote: >> by, in libxlDomainGetNumaParameters(), calling libxl_bitmap_init() as soon as >> possible, which avoids getting to 'cleanup:', where libxl_bitmap_dispose() >> happens, without having initialized the nodemap, and hence crashing after some >> invalid free()-s: >> > > Yikes! ACK to the fix. I've pushed it. This has been assigned CVE-6457; we'll get it tagged in libvirt.git and make sure it is backported to relevant branches once I've got more time (may be in 2014).