[prev in list] [next in list] [prev in thread] [next in thread]
List: xen-cvs
Subject: [Xen-changelog] [xen stable-4.6] free domain's vcpu array
From: patchbot () xen ! org
Date: 2015-10-30 17:01:08
Message-ID: E1ZsD36-0006Dg-47 () xenbits ! xen ! org
[Download RAW message or body]
commit 2c57108c36eaa10885b7d0daad534348717e4f9d
Author: Jan Beulich <jbeulich@suse.com>
AuthorDate: Thu Oct 29 13:49:56 2015 +0100
Commit: Jan Beulich <jbeulich@suse.com>
CommitDate: Thu Oct 29 13:49:56 2015 +0100
free domain's vcpu array
This was overlooked in fb442e2171 ("x86_64: allow more vCPU-s per
guest").
This is CVE-2015-7969 / XSA-149.
Reported-by: Ian Campbell <ian.campbell@citrix.com>
Signed-off-by: Jan Beulich <jbeulich@suse.com>
Reviewed-by: Ian Campbell <ian.campbell@citrix.com>
master commit: d46896ebbb23f3a9fef2eb6066ae614fd1acfd96
master date: 2015-10-29 13:35:40 +0100
---
xen/common/domain.c | 1 +
1 files changed, 1 insertions(+), 0 deletions(-)
diff --git a/xen/common/domain.c b/xen/common/domain.c
index 1b9fcfc..796c492 100644
--- a/xen/common/domain.c
+++ b/xen/common/domain.c
@@ -833,6 +833,7 @@ static void complete_domain_destroy(struct rcu_head *head)
xsm_free_security_domain(d);
free_cpumask_var(d->domain_dirty_cpumask);
+ xfree(d->vcpu);
free_domain_struct(d);
send_global_virq(VIRQ_DOM_EXC);
--
generated by git-patchbot for /home/xen/git/xen.git#stable-4.6
_______________________________________________
Xen-changelog mailing list
Xen-changelog@lists.xen.org
http://lists.xensource.com/xen-changelog
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic