]> git.ipfire.org Git - thirdparty/libvirt.git/commitdiff
rpc: Don't leak fd via CreateXMLWithFiles
authorBen Gray <ben.r.gray@gmail.com>
Sat, 23 Apr 2016 22:38:21 +0000 (18:38 -0400)
committerCole Robinson <crobinso@redhat.com>
Wed, 4 May 2016 22:41:28 +0000 (18:41 -0400)
FD passing APIs like CreateXMLWithFiles or OpenGraphicsFD will leak
file descriptors. The user passes in an fd, which is dup()'d in
virNetClientProgramCall. The new fd is what is transfered to the
server virNetClientIOWriteMessage.

Once all the fds have been written though, the parent msg->fds list
is immediately free'd, so the individual fds are never closed.

This closes each FD as its send to the server, so all fds have been
closed by the time msg->fds is free'd.

https://bugzilla.redhat.com/show_bug.cgi?id=1159766
(cherry picked from commit 5ba48584fbc5079c0ddbc9e9a52c96d7bcef0761)

src/rpc/virnetclient.c

index c68da6da28a0c3c05f1e42995d13248a9fd55825..c47284c3b89cff251a3b98a3d4d90dd5e51e3f2c 100644 (file)
@@ -1184,6 +1184,7 @@ virNetClientIOWriteMessage(virNetClientPtr client,
             if (rv == 0) /* Blocking */
                 return 0;
             thecall->msg->donefds++;
+            VIR_FORCE_CLOSE(thecall->msg->fds[i]);
         }
         thecall->msg->donefds = 0;
         thecall->msg->bufferOffset = thecall->msg->bufferLength = 0;