]> git.baikalelectronics.ru Git - kernel.git/commit
xen-blkback: don't leak stack data via response ring
authorJan Beulich <jbeulich@suse.com>
Tue, 13 Jun 2017 20:28:27 +0000 (16:28 -0400)
committerKonrad Rzeszutek Wilk <konrad.wilk@oracle.com>
Tue, 13 Jun 2017 20:28:32 +0000 (16:28 -0400)
commit0321cda4c0487c31f17eff83f0e8baf16bd91c97
treecacf9b2c4a98d97f7b697537fbbcd0909eb7ff1f
parentbc219e1f98390b9abf0a6adb2b9d2dbdfad528e3
xen-blkback: don't leak stack data via response ring

Rather than constructing a local structure instance on the stack, fill
the fields directly on the shared ring, just like other backends do.
Build on the fact that all response structure flavors are actually
identical (the old code did make this assumption too).

This is XSA-216.

Cc: stable@vger.kernel.org
Signed-off-by: Jan Beulich <jbeulich@suse.com>
Reviewed-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
drivers/block/xen-blkback/blkback.c
drivers/block/xen-blkback/common.h