projects / xen.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: d101b41) | patch
memory: fix off-by-one in XSA-346 change
authorJan Beulich <jbeulich@suse.com>
Tue, 24 Nov 2020 13:11:47 +0000 (14:11 +0100)
committerJan Beulich <jbeulich@suse.com>
Tue, 24 Nov 2020 13:11:47 +0000 (14:11 +0100)
commit0057b1f8fa79abe8272690341db54b064c8f2b7f
treec71e5dff2886e5d7b800a7a1d316ed2bfab74cf1tree | snapshot
parentd101b417b784a26326fc7800a79cc539ba570b79commit | diff
memory: fix off-by-one in XSA-346 change

The comparison against ARRAY_SIZE() needs to be >= in order to avoid
overrunning the pages[] array.

This is XSA-355.

Fixes: 5777a3742d88 ("IOMMU: hold page ref until after deferred TLB flush")
Signed-off-by: Jan Beulich <jbeulich@suse.com>
Reviewed-by: Julien Grall <jgrall@amazon.com>
master commit: 9b156bcc3ffcc7949edd4460b718a241e87ae302
master date: 2020-11-24 14:01:31 +0100
xen/common/memory.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.