aboutsummaryrefslogtreecommitdiffstats
path: root/tools
diff options
context:
space:
mode:
authorGianni Tedesco <gianni.tedesco@citrix.com>2010-09-23 19:16:00 +0100
committerGianni Tedesco <gianni.tedesco@citrix.com>2010-09-23 19:16:00 +0100
commit0809fbef31f2ab27189ead8eb8124d05ad95189b (patch)
tree9bb3455b3075788dcc40aeb3ee2bcea756e6603d /tools
parentce675adf0da0c129d4818518218242e929d29a4a (diff)
downloadxen-0809fbef31f2ab27189ead8eb8124d05ad95189b.tar.gz
xen-0809fbef31f2ab27189ead8eb8124d05ad95189b.tar.bz2
xen-0809fbef31f2ab27189ead8eb8124d05ad95189b.zip
xl: Fix stack corruption caused by non-terminated call to libxl__xs_writev
Signed-off-by: Gianni Tedesco <gianni.tedesco@citrix.com> Tested-by: Christoph Egger <Christoph.Egger@amd.com> Acked-by: Ian Jackson <ian.jackson@eu.citrix.com> Signed-off-by: Ian Jackson <ian.jackson@eu.citrix.com>
Diffstat (limited to 'tools')
-rw-r--r--tools/libxl/libxl.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/tools/libxl/libxl.c b/tools/libxl/libxl.c
index 8b086b9123..4e1fd04284 100644
--- a/tools/libxl/libxl.c
+++ b/tools/libxl/libxl.c
@@ -1718,7 +1718,7 @@ retry_transaction:
vm_path = libxl__xs_read(&gc,t,libxl__sprintf(&gc, "%s/vm", p->dom_path));
if (vm_path) {
/* Now write the vncpassword into it. */
- pass_stuff = libxl__calloc(&gc, 2, sizeof(char *));
+ pass_stuff = libxl__calloc(&gc, 3, sizeof(char *));
pass_stuff[0] = "vncpasswd";
pass_stuff[1] = info->vncpasswd;
libxl__xs_writev(&gc,t,vm_path,pass_stuff);