[Spice-devel] [PATCH spice-server v2 0/3] Fix duplicate channel connections

Frediano Ziglio fziglio at redhat.com
Wed Aug 30 09:36:35 UTC 2017


This series attempts to fix multiple connections from the
same client to the same channel.

This can happen with malicious clients.

Prevent the VM to crash simply closing the unwanted connection.

Changes since v1:
- change RedsStream to avoid the assumption that the watch
  is registered in the main core interface.

Frediano Ziglio (3):
  dcc: Fix NULL pointer dereference attempting to connect duplicate
    channels
  reds-stream: Allows to change core interface
  Fix crash attempting to connect duplicate channels

 server/dcc.c                |  4 +++-
 server/red-channel-client.c | 14 +++++++++++++-
 server/reds-stream.c        | 18 +++++++++++++-----
 server/reds-stream.h        |  1 +
 4 files changed, 30 insertions(+), 7 deletions(-)

-- 
2.13.5



More information about the Spice-devel mailing list