[Pkg-xen-changes] [xen] 29/70: free domain's vcpu array

[Ian James Campbell]

This is an automated email from the git hooks/post-receive script.

ijc pushed a commit to branch feature/bug805508
in repository xen.

commit 24d65be99c5723b448df7dc5a7f2807550b6151e
Author: Jan Beulich <jbeulich at suse.com>
Date:   Thu Oct 29 13:49:56 2015 +0100

    free domain's vcpu array
    
    This was overlooked in fb442e2171 ("x86_64: allow more vCPU-s per
    guest").
    
    This is CVE-2015-7969 / XSA-149.
    
    Reported-by: Ian Campbell <ian.campbell at citrix.com>
    Signed-off-by: Jan Beulich <jbeulich at suse.com>
    Reviewed-by: Ian Campbell <ian.campbell at citrix.com>
    master commit: d46896ebbb23f3a9fef2eb6066ae614fd1acfd96
    master date: 2015-10-29 13:35:40 +0100
    
    (cherry picked from commit 2c57108c36eaa10885b7d0daad534348717e4f9d)
    
    Patch-Name: CVE-2015-7969.diff
---
 xen/common/domain.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/xen/common/domain.c b/xen/common/domain.c
index 1b9fcfc..796c492 100644
--- a/xen/common/domain.c
+++ b/xen/common/domain.c
@@ -833,6 +833,7 @@ static void complete_domain_destroy(struct rcu_head *head)
 
     xsm_free_security_domain(d);
     free_cpumask_var(d->domain_dirty_cpumask);
+    xfree(d->vcpu);
     free_domain_struct(d);
 
     send_global_virq(VIRQ_DOM_EXC);

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xen/xen.git