From 295b4af4a1d4869f6b9990c4312a4397bf9429d3 Mon Sep 17 00:00:00 2001 From: "sos22@douglas.cl.cam.ac.uk" Date: Tue, 4 Apr 2006 14:04:32 +0100 Subject: [PATCH] fix mfn check of gnttab_transfer(). Signed-off-by: Steven Smith, sos22@cam.ac.uk From: Isaku Yamahata --- xen/common/grant_table.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/xen/common/grant_table.c b/xen/common/grant_table.c index a45e87a99d..3c2b46ccf0 100644 --- a/xen/common/grant_table.c +++ b/xen/common/grant_table.c @@ -618,8 +618,10 @@ gnttab_transfer( return -EFAULT; } + mfn = gmfn_to_mfn(d, gop.mfn); + /* Check the passed page frame for basic validity. */ - if ( unlikely(!mfn_valid(gop.mfn)) ) + if ( unlikely(!mfn_valid(mfn)) ) { DPRINTK("gnttab_transfer: out-of-range %lx\n", (unsigned long)gop.mfn); @@ -627,7 +629,6 @@ gnttab_transfer( goto copyback; } - mfn = gmfn_to_mfn(d, gop.mfn); page = mfn_to_page(mfn); if ( unlikely(IS_XEN_HEAP_FRAME(page)) ) { -- 2.30.2