All of lore.kernel.org
 help / color / mirror / Atom feed
* [PATCH] arinc653: don't leak hypervisor stack contents through XEN_SYSCTL_SCHEDOP_getinfo
@ 2015-06-08 13:24 Jan Beulich
  2015-06-08 16:57 ` Robert VanVossen
  0 siblings, 1 reply; 2+ messages in thread
From: Jan Beulich @ 2015-06-08 13:24 UTC (permalink / raw)
  To: xen-devel; +Cc: josh.whitehead, Robert VanVossen

[-- Attachment #1: Type: text/plain, Size: 656 bytes --]

arinc653: don't leak hypervisor stack contents through XEN_SYSCTL_SCHEDOP_getinfo

Note that due to XSA-77 this is not a security issue.

Reported-by: "栾尚聪(好风)" <shangcong.lsc@alibaba-inc.com>
Signed-off-by: Jan Beulich <jbeulich@suse.com>

--- a/xen/common/sched_arinc653.c
+++ b/xen/common/sched_arinc653.c
@@ -705,6 +705,7 @@ a653sched_adjust_global(const struct sch
         rc = arinc653_sched_set(ops, &local_sched);
         break;
     case XEN_SYSCTL_SCHEDOP_getinfo:
+        memset(&local_sched, -1, sizeof(local_sched));
         rc = arinc653_sched_get(ops, &local_sched);
         if ( rc )
             break;



[-- Attachment #2: arinc653-info-leak.patch --]
[-- Type: text/plain, Size: 655 bytes --]

arinc653: don't leak hypervisor stack contents through XEN_SYSCTL_SCHEDOP_getinfo

Note that due to XSA-77 this is not a security issue.
   
Reported-by: "栾尚聪(好风)" <shangcong.lsc@alibaba-inc.com>
Signed-off-by: Jan Beulich <jbeulich@suse.com>

--- a/xen/common/sched_arinc653.c
+++ b/xen/common/sched_arinc653.c
@@ -705,6 +705,7 @@ a653sched_adjust_global(const struct sch
         rc = arinc653_sched_set(ops, &local_sched);
         break;
     case XEN_SYSCTL_SCHEDOP_getinfo:
+        memset(&local_sched, -1, sizeof(local_sched));
         rc = arinc653_sched_get(ops, &local_sched);
         if ( rc )
             break;

[-- Attachment #3: Type: text/plain, Size: 126 bytes --]

_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xen.org
http://lists.xen.org/xen-devel

^ permalink raw reply	[flat|nested] 2+ messages in thread
* Re: [PATCH] arinc653: don't leak hypervisor stack contents through XEN_SYSCTL_SCHEDOP_getinfo
  2015-06-08 13:24 [PATCH] arinc653: don't leak hypervisor stack contents through XEN_SYSCTL_SCHEDOP_getinfo Jan Beulich
@ 2015-06-08 16:57 ` Robert VanVossen
  0 siblings, 0 replies; 2+ messages in thread
From: Robert VanVossen @ 2015-06-08 16:57 UTC (permalink / raw)
  To: Jan Beulich, xen-devel; +Cc: josh.whitehead

Hello,

On 6/8/2015 9:24 AM, Jan Beulich wrote:
> arinc653: don't leak hypervisor stack contents through XEN_SYSCTL_SCHEDOP_getinfo
> 
> Note that due to XSA-77 this is not a security issue.
>    
> Reported-by: "栾尚聪(好风)" <shangcong.lsc@alibaba-inc.com>
> Signed-off-by: Jan Beulich <jbeulich@suse.com>
> 
> --- a/xen/common/sched_arinc653.c
> +++ b/xen/common/sched_arinc653.c
> @@ -705,6 +705,7 @@ a653sched_adjust_global(const struct sch
>          rc = arinc653_sched_set(ops, &local_sched);
>          break;
>      case XEN_SYSCTL_SCHEDOP_getinfo:
> +        memset(&local_sched, -1, sizeof(local_sched));
>          rc = arinc653_sched_get(ops, &local_sched);
>          if ( rc )
>              break;
> 
> 

Acked-by Robert VanVossen <robert.vanvossen@dornerworks.com>

Thanks,
Robbie VanVossen

_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xen.org
http://lists.xen.org/xen-devel

^ permalink raw reply	[flat|nested] 2+ messages in thread
end of thread, other threads:[~2015-06-08 16:59 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2015-06-08 13:24 [PATCH] arinc653: don't leak hypervisor stack contents through XEN_SYSCTL_SCHEDOP_getinfo Jan Beulich
2015-06-08 16:57 ` Robert VanVossen

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.