commit ca697e90d5bd6a6dfb94bfb6d4438bdf9a44b739 Author: Ján Tomko Date: Fri Apr 12 17:30:56 2013 +0200 daemon: fix leak after listing all volumes CVE-2013-1962 remoteDispatchStoragePoolListAllVolumes wasn't freeing the pool. The pool also held a reference to the connection, preventing it from getting freed and closing the netcf interface driver, which held two sockets open. Index: libvirt-1.0.5/daemon/remote.c =================================================================== --- libvirt-1.0.5.orig/daemon/remote.c +++ libvirt-1.0.5/daemon/remote.c @@ -4226,6 +4226,8 @@ cleanup: virStorageVolFree(vols[i]); VIR_FREE(vols); } + if (pool) + virStoragePoolFree(pool); return rv; }