CVE-2013-1962
remoteDispatchStoragePoolListAllVolumes wasn't freeing the pool.
The pool also held a reference to the connection, preventing it from
getting freed and closing the netcf interface driver, which held two
sockets open.
---
daemon/remote.c | 2 ++
1 file changed, 2 insertions(+)
diff --git a/daemon/remote.c b/daemon/remote.c
index 1d21478..af89e60 100644
--- a/daemon/remote.c
+++ b/daemon/remote.c
@@ -4202,6 +4202,8 @@ cleanup:
virStorageVolFree(vols[i]);
VIR_FREE(vols);
}
+ if (pool)
+ virStoragePoolFree(pool);
return rv;
}
--
1.8.1.5