$NetBSD: patch-CVE-2014-1950,v 1.1 2014/02/13 11:12:58 drochner Exp $ http://lists.xenproject.org/archives/html/xen-announce/2014-02/msg00006.html --- libxc/xc_cpupool.c.orig 2014-02-12 16:27:31.000000000 +0000 +++ libxc/xc_cpupool.c 2014-02-12 16:28:11.000000000 +0000 @@ -104,6 +104,7 @@ xc_cpupoolinfo_t *xc_cpupool_getinfo(xc_ info->cpumap = xc_cpumap_alloc(xch); if (!info->cpumap) { free(info); + info = NULL; goto out; } info->cpupool_id = sysctl.u.cpupool_op.cpupool_id;