]> git.ipfire.org Git - thirdparty/libvirt.git/commit
storage_driver: Unlock object on ACL fail in storagePoolLookupByTargetPath CVE-2021-3667
authorPeter Krempa <pkrempa@redhat.com>
Wed, 21 Jul 2021 09:22:25 +0000 (11:22 +0200)
committerPeter Krempa <pkrempa@redhat.com>
Fri, 23 Jul 2021 07:59:40 +0000 (09:59 +0200)
commit447f69dec47e1b0bd15ecd7cd49a9fd3b050fb87
treec5a8fab6fe7af9f235703379668363238f3f934d
parentaf013aa14c6966f0aebd51e2fcafd52d8910544e
storage_driver: Unlock object on ACL fail in storagePoolLookupByTargetPath

'virStoragePoolObjListSearch' returns a locked and refed object, thus we
must release it on ACL permission failure.

Fixes: 7aa0e8c0cb8
Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1984318
Signed-off-by: Peter Krempa <pkrempa@redhat.com>
Reviewed-by: Michal Privoznik <mprivozn@redhat.com>
src/storage/storage_driver.c