xemu/audio
Gerd Hoffmann 3268a845f4 audio: release capture buffers
AUD_add_capture() allocates two buffers which are never released.
Add the missing calls to AUD_del_capture().

Impact: Allows vnc clients to exhaust host memory by repeatedly
starting and stopping audio capture.

Fixes: CVE-2017-8309
Cc: P J P <ppandit@redhat.com>
Cc: Huawei PSIRT <PSIRT@huawei.com>
Reported-by: "Jiangxin (hunter, SCC)" <jiangxin1@huawei.com>
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Reviewed-by: Prasad J Pandit <pjp@fedoraproject.org>
Message-id: 20170428075612.9997-1-kraxel@redhat.com
2017-05-04 08:31:48 +02:00
..
alsaaudio.c audio: Clean up includes 2016-02-02 13:57:31 +01:00
audio_int.h Clean up decorations and whitespace around header guards 2016-07-12 16:20:46 +02:00
audio_pt_int.c audio: Clean up includes 2016-02-02 13:57:31 +01:00
audio_pt_int.h Clean up decorations and whitespace around header guards 2016-07-12 16:20:46 +02:00
audio_template.h
audio_win_int.c audio: Clean up includes 2016-02-02 13:57:31 +01:00
audio_win_int.h
audio.c audio: release capture buffers 2017-05-04 08:31:48 +02:00
audio.h replay: add record/replay for audio passthrough 2017-03-01 15:11:44 +01:00
coreaudio.c audio: clean up before monitor clean up 2016-08-08 14:17:00 +02:00
dsound_template.h
dsoundaudio.c audio: Clean up includes 2016-02-02 13:57:31 +01:00
Makefile.objs
mixeng_template.h
mixeng.c replay: add record/replay for audio passthrough 2017-03-01 15:11:44 +01:00
mixeng.h Clean up decorations and whitespace around header guards 2016-07-12 16:20:46 +02:00
noaudio.c qemu-common: stop including qemu/host-utils.h from qemu-common.h 2016-05-19 16:42:28 +02:00
ossaudio.c os-posix: include sys/mman.h 2016-06-16 18:39:03 +02:00
paaudio.c audio: pa: Set volume of recording stream instead of recording device 2016-06-03 11:13:38 +02:00
rate_template.h
sdlaudio.c audio/sdlaudio: Allow audio playback with SDL2 2017-03-01 15:12:03 +01:00
spiceaudio.c qemu-common: stop including qemu/host-utils.h from qemu-common.h 2016-05-19 16:42:28 +02:00
trace-events trace-events: fix first line comment in trace-events 2016-08-12 10:36:01 +01:00
wavaudio.c qemu-common: stop including qemu/host-utils.h from qemu-common.h 2016-05-19 16:42:28 +02:00
wavcapture.c audio: Clean up includes 2016-02-02 13:57:31 +01:00