diff --git a/fix-potential-use-after-free-bugs-in-libxalarm.patch b/fix-potential-use-after-free-bugs-in-libxalarm.patch new file mode 100644 index 0000000000000000000000000000000000000000..d78317e597f704511744fafe98b757d0d826c9e5 --- /dev/null +++ b/fix-potential-use-after-free-bugs-in-libxalarm.patch @@ -0,0 +1,24 @@ +From 37c606446a45fedd08ff3782e0185552f8f34dec Mon Sep 17 00:00:00 2001 +From: shixuantong +Date: Tue, 9 Dec 2025 11:15:22 +0800 +Subject: [PATCH] fix potential use-after-free bugs in libxalarm + +--- + src/libs/libxalarm/register_xalarm.c | 1 + + 1 file changed, 1 insertion(+) + +diff --git a/src/libs/libxalarm/register_xalarm.c b/src/libs/libxalarm/register_xalarm.c +index 13584cb..0309ae6 100644 +--- a/src/libs/libxalarm/register_xalarm.c ++++ b/src/libs/libxalarm/register_xalarm.c +@@ -676,6 +676,7 @@ int xalarm_register_event(struct alarm_register **register_info, struct alarm_su + (*register_info)->register_fd = create_unix_socket(PATH_REG_ALARM); + if ((*register_info)->register_fd == -1) { + free(*register_info); ++ *register_info = NULL; + return -ENOTCONN; + } + +-- +2.27.0 + diff --git a/sysSentry.spec b/sysSentry.spec index 89ff88d28f4daa0dc9b3caf795f233d76d5481c6..b0c71b762378848f3e0da87a3962699db7c9bd7c 100644 --- a/sysSentry.spec +++ b/sysSentry.spec @@ -4,7 +4,7 @@ Summary: System Inspection Framework Name: sysSentry Version: 1.0.3 -Release: 19 +Release: 20 License: Mulan PSL v2 Group: System Environment/Daemons Source0: https://gitee.com/openeuler/sysSentry/releases/download/v%{version}/%{name}-%{version}.tar.gz @@ -38,6 +38,7 @@ Patch26: Fix-Security-Scan-Warning.patch Patch27: Fix-two-code-review-comments.patch Patch28: Add-MulanV2-License-statement.patch Patch29: slow-io-plugin-upgrade.patch +Patch30: fix-potential-use-after-free-bugs-in-libxalarm.patch BuildRequires: cmake gcc-c++ BuildRequires: python3 python3-setuptools @@ -290,6 +291,12 @@ rm -rf /var/run/sysSentry | : %attr(0600,root,root) %config(noreplace) %{_sysconfdir}/sysSentry/tasks/soc_ring_sentry.mod %changelog +* Tue Dec 9 2025 shixuantong - 1.0.3-20 +- Type:bugfix +- CVE:NA +- SUG:NA +- DESC:fix potential use-after-free bugs in libxalarm + * Wed Dec 3 2025 shixuantong - 1.0.3-19 - Type:bugfix - CVE:NA