* [PATCH] arinc653: don't leak hypervisor stack contents through XEN_SYSCTL_SCHEDOP_getinfo
@ 2015-06-08 13:24 Jan Beulich
2015-06-08 16:57 ` Robert VanVossen
0 siblings, 1 reply; 2+ messages in thread
From: Jan Beulich @ 2015-06-08 13:24 UTC (permalink / raw)
To: xen-devel; +Cc: josh.whitehead, Robert VanVossen
[-- Attachment #1: Type: text/plain, Size: 656 bytes --]
arinc653: don't leak hypervisor stack contents through XEN_SYSCTL_SCHEDOP_getinfo
Note that due to XSA-77 this is not a security issue.
Reported-by: "栾尚聪(好风)" <shangcong.lsc@alibaba-inc.com>
Signed-off-by: Jan Beulich <jbeulich@suse.com>
--- a/xen/common/sched_arinc653.c
+++ b/xen/common/sched_arinc653.c
@@ -705,6 +705,7 @@ a653sched_adjust_global(const struct sch
rc = arinc653_sched_set(ops, &local_sched);
break;
case XEN_SYSCTL_SCHEDOP_getinfo:
+ memset(&local_sched, -1, sizeof(local_sched));
rc = arinc653_sched_get(ops, &local_sched);
if ( rc )
break;
[-- Attachment #2: arinc653-info-leak.patch --]
[-- Type: text/plain, Size: 655 bytes --]
arinc653: don't leak hypervisor stack contents through XEN_SYSCTL_SCHEDOP_getinfo
Note that due to XSA-77 this is not a security issue.
Reported-by: "æ ¾å°šèª(好风)" <shangcong.lsc@alibaba-inc.com>
Signed-off-by: Jan Beulich <jbeulich@suse.com>
--- a/xen/common/sched_arinc653.c
+++ b/xen/common/sched_arinc653.c
@@ -705,6 +705,7 @@ a653sched_adjust_global(const struct sch
rc = arinc653_sched_set(ops, &local_sched);
break;
case XEN_SYSCTL_SCHEDOP_getinfo:
+ memset(&local_sched, -1, sizeof(local_sched));
rc = arinc653_sched_get(ops, &local_sched);
if ( rc )
break;
[-- Attachment #3: Type: text/plain, Size: 126 bytes --]
_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xen.org
http://lists.xen.org/xen-devel
^ permalink raw reply [flat|nested] 2+ messages in thread* Re: [PATCH] arinc653: don't leak hypervisor stack contents through XEN_SYSCTL_SCHEDOP_getinfo
2015-06-08 13:24 [PATCH] arinc653: don't leak hypervisor stack contents through XEN_SYSCTL_SCHEDOP_getinfo Jan Beulich
@ 2015-06-08 16:57 ` Robert VanVossen
0 siblings, 0 replies; 2+ messages in thread
From: Robert VanVossen @ 2015-06-08 16:57 UTC (permalink / raw)
To: Jan Beulich, xen-devel; +Cc: josh.whitehead
Hello,
On 6/8/2015 9:24 AM, Jan Beulich wrote:
> arinc653: don't leak hypervisor stack contents through XEN_SYSCTL_SCHEDOP_getinfo
>
> Note that due to XSA-77 this is not a security issue.
>
> Reported-by: "栾尚聪(好风)" <shangcong.lsc@alibaba-inc.com>
> Signed-off-by: Jan Beulich <jbeulich@suse.com>
>
> --- a/xen/common/sched_arinc653.c
> +++ b/xen/common/sched_arinc653.c
> @@ -705,6 +705,7 @@ a653sched_adjust_global(const struct sch
> rc = arinc653_sched_set(ops, &local_sched);
> break;
> case XEN_SYSCTL_SCHEDOP_getinfo:
> + memset(&local_sched, -1, sizeof(local_sched));
> rc = arinc653_sched_get(ops, &local_sched);
> if ( rc )
> break;
>
>
Acked-by Robert VanVossen <robert.vanvossen@dornerworks.com>
Thanks,
Robbie VanVossen
_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xen.org
http://lists.xen.org/xen-devel
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2015-06-08 16:59 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2015-06-08 13:24 [PATCH] arinc653: don't leak hypervisor stack contents through XEN_SYSCTL_SCHEDOP_getinfo Jan Beulich
2015-06-08 16:57 ` Robert VanVossen
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.