summaryrefslogtreecommitdiffstats
path: root/system/xen/xsa/xsa232.patch
diff options
context:
space:
mode:
author Mario Preksavec2017-09-18 23:05:24 +0200
committer David Spencer2017-09-23 17:34:16 +0200
commit0738227939177fbbbf4af44238b4222d2be040c8 (patch)
treeee298bc83ea227f2118d456b77d216cbd81abf37 /system/xen/xsa/xsa232.patch
parentc9bcfd5b7d0b29bc5d59bac9d76149d743da6cf9 (diff)
downloadslackbuilds-0738227939177fbbbf4af44238b4222d2be040c8.tar.gz
system/xen: XSA 231-235 update.
Signed-off-by: Mario Preksavec <mario@slackware.hr>
Diffstat (limited to 'system/xen/xsa/xsa232.patch')
-rw-r--r--system/xen/xsa/xsa232.patch23
1 files changed, 23 insertions, 0 deletions
diff --git a/system/xen/xsa/xsa232.patch b/system/xen/xsa/xsa232.patch
new file mode 100644
index 0000000000..9e5f35c7d6
--- /dev/null
+++ b/system/xen/xsa/xsa232.patch
@@ -0,0 +1,23 @@
+From: Andrew Cooper <andrew.cooper3@citrix.com>
+Subject: grant_table: fix GNTTABOP_cache_flush handling
+
+Don't fall over a NULL grant_table pointer when the owner of the domain
+is a system domain (DOMID_{XEN,IO} etc).
+
+This is XSA-232.
+
+Reported-by: Matthew Daley <mattd@bugfuzz.com>
+Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
+Reviewed-by: Jan Beulich <jbeulich@suse.com>
+
+--- a/xen/common/grant_table.c
++++ b/xen/common/grant_table.c
+@@ -3053,7 +3053,7 @@ static int cache_flush(gnttab_cache_flus
+
+ page = mfn_to_page(mfn);
+ owner = page_get_owner_and_reference(page);
+- if ( !owner )
++ if ( !owner || !owner->grant_table )
+ {
+ rcu_unlock_domain(d);
+ return -EPERM;