From: Ian Campbell <ian.campbell@citrix.com>
Date: Wed, 25 Jun 2014 12:58:59 +0000 (+0100)
Subject: xen: arm: initialise the grant_table_gpfn array on allocation
X-Git-Tag: archive/raspbian/4.8.0-1+rpi1~1^2~4796
X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=9cf5ff44a38b36a316b506758dbf6887de0e4a56;p=xen.git

xen: arm: initialise the grant_table_gpfn array on allocation

Avoids leaking uninitialised memory via the grant table setup hypercall.

This is XSA-101.

Reported-by: Julien Grall <julien.grall@linaro.org>
Signed-off-by: Ian Campbell <ian.campbell@citrix.com>
---

diff --git a/xen/arch/arm/domain.c b/xen/arch/arm/domain.c
index e20ba0b39a..437885d41c 100644
--- a/xen/arch/arm/domain.c
+++ b/xen/arch/arm/domain.c
@@ -394,7 +394,7 @@ struct domain *alloc_domain_struct(void)
         return NULL;
 
     clear_page(d);
-    d->arch.grant_table_gpfn = xmalloc_array(xen_pfn_t, max_nr_grant_frames);
+    d->arch.grant_table_gpfn = xzalloc_array(xen_pfn_t, max_nr_grant_frames);
     return d;
 }