projects / xen.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8233ca5) | patch
x86/HVM: prevent use-after-free when destroying a domain
authorMihai Donțu <mdontu@bitdefender.com>
Tue, 6 Jan 2015 12:49:52 +0000 (12:49 +0000)
committerIan Jackson <Ian.Jackson@eu.citrix.com>
Tue, 6 Jan 2015 12:50:44 +0000 (12:50 +0000)
commitd3c151fd3a4365fc6107198bfc975807d40d157d
tree63a4e3cf06ecccd3930c96ca0e9dc6b720ab9aa0tree | snapshot
parent8233ca53adf008da54c01d55d3309c4b0999ddb5commit | diff
x86/HVM: prevent use-after-free when destroying a domain

hvm_domain_relinquish_resources() can free certain domain resources
which can still be accessed, e.g. by HVMOP_set_param, while the domain
is being cleaned up.

This is CVE-2015-0361 / XSA-116.

Signed-off-by: Mihai Donțu <mdontu@bitdefender.com>
Tested-by: Răzvan Cojocaru <rcojocaru@bitdefender.com>
Reviewed-by: Andrew Cooper <andrew.cooper3@citrix.com>
Reviewed-by: Jan Beulich <jbeulich@suse.com>
xen/arch/x86/hvm/hvm.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.