evtchn/FIFO: add 2nd smp_rmb() to evtchn_fifo_word_from_port()
authorJan Beulich <jbeulich@suse.com>
Tue, 15 Dec 2020 11:31:10 +0000 (12:31 +0100)
committerHans van Kranenburg <hans@knorrie.org>
Tue, 15 Dec 2020 11:31:10 +0000 (12:31 +0100)
commitb19d756eb913baf985ea60f3e8e70aa2e45c954f
tree7b2deab41cd71b4210766a50226fb8131447ea5a
parent149138574e7bd975af256cd119cd38d02f6cf9c6
evtchn/FIFO: add 2nd smp_rmb() to evtchn_fifo_word_from_port()

Besides with add_page_to_event_array() the function also needs to
synchronize with evtchn_fifo_init_control() setting both d->evtchn_fifo
and (subsequently) d->evtchn_port_ops.

This is XSA-359 / CVE-2020-29571.

Signed-off-by: Jan Beulich <jbeulich@suse.com>
Reviewed-by: Julien Grall <jgrall@amazon.com>
xen/common/event_fifo.c