bitkeeper revision 1.1236.1.81 (423a9c35x9t_HfUlWPlWGs0UrB7kUg)

Fix bind-IPI hypercall arg check.
Signed-off-by: Anthony Liguori <aliguori@us.ibm.com>
Signed-off-by: Keir Fraser <keir@xensource.com>

diff --git a/xen/common/event_channel.c b/xen/common/event_channel.c
index 69857e644ca177c5525b5dcaa0e3b697b0064c22..b1ed16ac370d7dc124212e345daee1198520bf6f 100644 (file)
--- a/xen/common/event_channel.c
+++ b/xen/common/event_channel.c
@@ -283,6 +283,9 @@ static long evtchn_bind_ipi(evtchn_bind_ipi_t *bind)
     struct domain *d = ed->domain;
     int            port, ipi_edom = bind->ipi_edom;
 
+    if ( ipi_edom >= MAX_VIRT_CPUS )
+        return -EINVAL;
+
     spin_lock(&d->event_channel_lock);
 
     if ( (port = get_free_port(ed)) >= 0 )