xen-blkback: don't leak stack data via response ring
authorJan Beulich <jbeulich@suse.com>
Tue, 13 Jun 2017 20:28:27 +0000 (16:28 -0400)
committerBen Hutchings <ben@decadent.org.uk>
Tue, 19 Sep 2017 01:34:05 +0000 (02:34 +0100)
commit0b66b093391cd7d94d90fef03d2c1c4f333a3c7f
tree37c5efd6cb61560229ac7d8a86a440a6527db4eb
parent41a23be749525c65610a3dae884d62a5c71162d0
xen-blkback: don't leak stack data via response ring

Rather than constructing a local structure instance on the stack, fill
the fields directly on the shared ring, just like other backends do.
Build on the fact that all response structure flavors are actually
identical (the old code did make this assumption too).

This is XSA-216.

Cc: stable@vger.kernel.org
Signed-off-by: Jan Beulich <jbeulich@suse.com>
Reviewed-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
Gbp-Pq: Topic bugfix/all
Gbp-Pq: Name xen-blkback-don-t-leak-stack-data-via-response-ring.patch
drivers/block/xen-blkback/blkback.c
drivers/block/xen-blkback/common.h