https://github.com/torvalds/linux
Revision 239af7c7132a617f9dcd05da1dc92b96bc6d0645 authored by Juergen Gross on 14 October 2014, 09:00:18 UTC, committed by David Vrabel on 23 October 2014, 15:24:01 UTC
In case a race was detected during allocation of a new p2m tree
element in alloc_p2m() the new allocated mid_mfn page is freed without
updating the pointer to the found value in the tree. This will result
in overwriting the just freed page with the mfn of the p2m leaf.

Signed-off-by: Juergen Gross <jgross@suse.com>
Signed-off-by: David Vrabel <david.vrabel@citrix.com>
1 parent fd8b795
History
Tip revision: 239af7c7132a617f9dcd05da1dc92b96bc6d0645 authored by Juergen Gross on 14 October 2014, 09:00:18 UTC
x86/xen: avoid writing to freed memory after race in p2m handling
Tip revision: 239af7c
File Mode Size
Documentation
arch
block
crypto
drivers
firmware
fs
include
init
ipc
kernel
lib
mm
net
samples
scripts
security
sound
tools
usr
virt
.gitignore -rw-r--r-- 1.1 KB
.mailmap -rw-r--r-- 4.7 KB
COPYING -rw-r--r-- 18.3 KB
CREDITS -rw-r--r-- 93.8 KB
Kbuild -rw-r--r-- 2.5 KB
Kconfig -rw-r--r-- 252 bytes
MAINTAINERS -rw-r--r-- 283.9 KB
Makefile -rw-r--r-- 53.1 KB
README -rw-r--r-- 18.3 KB
REPORTING-BUGS -rw-r--r-- 7.3 KB

README

back to top