projects / xen.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ae5092f) | patch
libxc: limit cpu values when setting vcpu affinity
authorIan Jackson <ian.jackson@eu.citrix.com>
Wed, 29 May 2013 14:48:11 +0000 (15:48 +0100)
committerIan Jackson <Ian.Jackson@eu.citrix.com>
Wed, 29 May 2013 14:49:22 +0000 (15:49 +0100)
commit41abbadef60e5fccdfd688579dd458f7f7887cf5
tree3e8ac2766d55e06f625edf85b99b1a8e46d791e4tree | snapshot
parentae5092f420e87a4a6b541bf581378c8cc0ee3a99commit | diff
libxc: limit cpu values when setting vcpu affinity

When support for pinning more than 64 cpus was added, check for cpu
out-of-range values was removed. This can lead to subsequent
out-of-bounds cpumap array accesses in case the cpu number is higher
than the actual count.

This patch returns the check.

This is CVE-2013-2072 / XSA-56

Signed-off-by: Petr Matousek <pmatouse@redhat.com>
tools/python/xen/lowlevel/xc/xc.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.