Re: [libvirt] [PATCH] proxy: Fix use of uninitalized memory

2009-01-28 Thread Jim Meyering
Jim Meyering wrote: ... > Thanks again. > Here's what I expect to commit. Committed that. -- Libvir-list mailing list Libvir-list@redhat.com https://www.redhat.com/mailman/listinfo/libvir-list

Re: [libvirt] [PATCH] proxy: Fix use of uninitalized memory

2009-01-28 Thread Jim Meyering
"Rasputin" wrote: > On short read, members of packet header are checked before actually read. > If uninitialized values can pass the test, they can be set to arbitrary > values while reading remaining portion of a packet. > > Buffer overflow is possible. libvirt_proxy is suid-root. > > diff -urp

Re: [libvirt] [PATCH] proxy: Fix use of uninitalized memory

2009-01-28 Thread Jim Meyering
"Rasputin" wrote: > On short read, members of packet header are checked before actually read. > If uninitialized values can pass the test, they can be set to arbitrary > values while reading remaining portion of a packet. > > Buffer overflow is possible. libvirt_proxy is suid-root. > > diff -urp l

[libvirt] [PATCH] proxy: Fix use of uninitalized memory

2009-01-27 Thread Rasputin
On short read, members of packet header are checked before actually read. If uninitialized values can pass the test, they can be set to arbitrary values while reading remaining portion of a packet. Buffer overflow is possible. libvirt_proxy is suid-root. diff -urp libvirt-0.5.1/proxy/libvirt_pr