]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: b8203db) | patch
x86/xen: avoid writing to freed memory after race in p2m handling
authorJuergen Gross <jgross@suse.com>
Tue, 14 Oct 2014 09:00:18 +0000 (11:00 +0200)
committerDavid Vrabel <david.vrabel@citrix.com>
Thu, 23 Oct 2014 15:24:01 +0000 (16:24 +0100)
commit3376764254c4b271d0e887b86df28d9c44cbc88d
tree74c821845a28a43278cf4522f0871f70dcbb2ba4tree | snapshot
parentb8203db8e0d2eec34ca69a846c48e3143d11cab4commit | diff
x86/xen: avoid writing to freed memory after race in p2m handling

In case a race was detected during allocation of a new p2m tree
element in alloc_p2m() the new allocated mid_mfn page is freed without
updating the pointer to the found value in the tree. This will result
in overwriting the just freed page with the mfn of the p2m leaf.

Signed-off-by: Juergen Gross <jgross@suse.com>
Signed-off-by: David Vrabel <david.vrabel@citrix.com>
arch/x86/xen/p2m.c diff | blob | history
Linux Kernel Source Tree.