tools/oxenstored: Make evaluation order explicit
authorChristian Lindig <christian.lindig@citrix.com>
Mon, 13 Aug 2018 16:26:56 +0000 (17:26 +0100)
committerAndrew Cooper <andrew.cooper3@citrix.com>
Tue, 14 Aug 2018 15:56:46 +0000 (16:56 +0100)
commit73392c7fd14c59f8c96e0b2eeeb329e4ae9086b6
tree86157a429c9ebf3b935a018aca2acb2d55f28a6a
parent2a8a8e99feb950504559196521bc9fd63ed3a962
tools/oxenstored: Make evaluation order explicit

In Store.path_write(), Path.apply_modify() updates the node_created
reference and both the value of apply_modify() and node_created are
returned by path_write().

At least with OCaml 4.06.1 this leads to the value of node_created being
returned *before* it is updated by apply_modify().  This in turn leads
to the quota for a domain not being updated in Store.write().  Hence, a
guest can create an unlimited number of entries in xenstore.

The fix is to make evaluation order explicit.

This is XSA-272.

Signed-off-by: Christian Lindig <christian.lindig@citrix.com>
Reviewed-by: Rob Hoes <rob.hoes@citrix.com>
tools/ocaml/xenstored/store.ml