• L
    audit: eliminate potential null pointer deref when auditing macvtap devices · 7cc101ce
    Laine Stump 提交于
    The newly added call to qemuAuditNetDevice in qemuPhysIfaceConnect was
    assuming that res_ifname (the name of the macvtap device) was always
    valid, but this isn't the case. If openMacvtapTap fails, it always
    returns NULL, which would result in a segv.
    
    Since the audit log only needs a record of devices that are actually
    sent to qemu, and a failure to open the macvtap device means that no
    device will be sent to qemu, we can solve this problem by only doing
    the audit if openMacvtapTap is successful (in which case res_ifname is
    guaranteed valid).
    7cc101ce
qemu_command.c 209.8 KB