mirror of
https://github.com/xen-project/xen.git
synced 2026-10-29 18:50:05 +01:00
Juergen Gross
7985e875b9
conn_delete_all_transactions() should be callable in any context, resetting ALL transaction related data. This includes number of active transactions and the transaction pointer in struct connection. So reset conn->trans to NULL in conn_delete_all_transactions() and do the cleanup for each transaction in destroy_transaction(). This avoids triggering the assert() in conn_delete_all_transactions() in case e.g. ignore_connection() was called while an operation inside a transaction was performed, or XS_RESET_WATCHES was called in a transaction. This is XSA-484 / CVE-2026-23557. Reported-by: Andrii Sultanov <andriy.sultanov@vates.tech> Fixes:1f9d04fb02("xenstored: allow guest to shutdown all its watches/transactions") Signed-off-by: Juergen Gross <jgross@suse.com> (cherry picked from commite88031d1fe)
The following files are imported from the Samba project. We use the versions from Samba 3, the current stable branch. talloc.c: samba-trunk/source/lib/talloc.c r14291 2006-03-13 04:27:47 +0000 talloc.h: samba-trunk/source/include/talloc.h r11986 2005-12-01 00:43:36 +0000