[Pkg-xen-changes] [xen] 07/11: xenoprof: free domain's vcpu array
Bastian Blank
waldi at moszumanska.debian.org
Sun Nov 1 20:39:28 UTC 2015
This is an automated email from the git hooks/post-receive script.
waldi pushed a commit to branch develop
in repository xen.
commit 967130a6c0a919da36281b69f600a31c22715b8c
Author: Jan Beulich <jbeulich at suse.com>
Date: Thu Oct 29 13:51:24 2015 +0100
xenoprof: free domain's vcpu array
This was overlooked in fb442e2171 ("x86_64: allow more vCPU-s per
guest").
This is CVE-2015-7969 / XSA-151.
Signed-off-by: Jan Beulich <jbeulich at suse.com>
Reviewed-by: Ian Campbell <ian.campbell at citrix.com>
master commit: 6e97c4b37386c2d09e09e9b5d5d232e37728b960
master date: 2015-10-29 13:36:52 +0100
(cherry picked from commit 429f0cd270851462783fc6d56d6bae9cbb40bdca)
Patch-Name: CVE-2015-7969.1.diff
---
xen/common/xenoprof.c | 2 ++
1 file changed, 2 insertions(+)
diff --git a/xen/common/xenoprof.c b/xen/common/xenoprof.c
index 1061323..53a803a 100644
--- a/xen/common/xenoprof.c
+++ b/xen/common/xenoprof.c
@@ -239,6 +239,7 @@ static int alloc_xenoprof_struct(
d->xenoprof->rawbuf = alloc_xenheap_pages(get_order_from_pages(npages), 0);
if ( d->xenoprof->rawbuf == NULL )
{
+ xfree(d->xenoprof->vcpu);
xfree(d->xenoprof);
d->xenoprof = NULL;
return -ENOMEM;
@@ -286,6 +287,7 @@ void free_xenoprof_pages(struct domain *d)
free_xenheap_pages(x->rawbuf, order);
}
+ xfree(x->vcpu);
xfree(x);
d->xenoprof = NULL;
}
--
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xen/xen.git
More information about the Pkg-xen-changes
mailing list