domctl: don't allow a toolstack domain to call domain_pause() on itself
authorAndrew Cooper <andrew.cooper3@citrix.com>
Wed, 1 Apr 2015 09:08:33 +0000 (10:08 +0100)
committerIan Campbell <ian.campbell@citrix.com>
Wed, 1 Apr 2015 09:16:25 +0000 (10:16 +0100)
commit131a0ea637e323b1adc5f076165f349612298afa
tree855496c252279ad0aed6d130033aea097d4fbe30
parentb10bca0483a1fa74de99807b89b13b27064794e1
domctl: don't allow a toolstack domain to call domain_pause() on itself

These DOMCTL subops were accidentally declared safe for disaggregation
in the wake of XSA-77.

This is XSA-127 / CVE-2015-2751.

Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
Reviewed-by: Jan Beulich <jbeulich@suse.com>
Acked-by: Ian Campbell <ian.campbell@citrix.com>
xen/arch/x86/domctl.c
xen/common/domctl.c