Tony found a direct userspace access with his unit test for

grant_table.c.  We access "uop->frame_list" (a pointer) directly, rather
than using "op.frame_list".

Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
Signed-off-by: Tony Breeds <tony@bakeyournoodle.com>

diff --git a/xen/common/grant_table.c b/xen/common/grant_table.c
index 93c352e6ed2bd6ce7e527b45c6b7b351b1de1fb9..4be9482eaaab063f64cdb8cdedda22b91057441b 100644 (file)
--- a/xen/common/grant_table.c
+++ b/xen/common/grant_table.c
@@ -579,7 +579,7 @@ gnttab_setup_table(
         (void)put_user(GNTST_okay, &uop->status);
         for ( i = 0; i < op.nr_frames; i++ )
             (void)put_user(gnttab_shared_mfn(d, d->grant_table, i),
-                           &uop->frame_list[i]);
+                           &op.frame_list[i]);
     }
 
     put_domain(d);