646cd8897b
Updated block-dmmd script - fate#310510 - fix xenpaging restore changes to integrate paging into xm/xend xenpaging.autostart.patch xenpaging.doc.patch - bnc#787163 - VUL-0: CVE-2012-4544: xen: Domain builder Out-of- memory due to malicious kernel/ramdisk (XSA 25) CVE-2012-4544-xsa25.patch - bnc#779212 - VUL-0: CVE-2012-4411: XEN / qemu: guest administrator can access qemu monitor console (XSA-19) CVE-2012-4411-xsa19.patch - bnc#786516 - VUL-0: CVE-2012-4535: xen: Timer overflow DoS vulnerability CVE-2012-4535-xsa20.patch - bnc#786518 - VUL-0: CVE-2012-4536: xen: pirq range check DoS vulnerability CVE-2012-4536-xsa21.patch - bnc#786517 - VUL-0: CVE-2012-4537: xen: Memory mapping failure DoS vulnerability CVE-2012-4537-xsa22.patch - bnc#786519 - VUL-0: CVE-2012-4538: xen: Unhooking empty PAE entries DoS vulnerability CVE-2012-4538-xsa23.patch - bnc#786520 - VUL-0: CVE-2012-4539: xen: Grant table hypercall infinite loop DoS vulnerability CVE-2012-4539-xsa24.patch OBS-URL: https://build.opensuse.org/package/show/Virtualization/xen?expand=0&rev=212
31 lines
1002 B
Diff
31 lines
1002 B
Diff
# HG changeset patch
|
|
# User Jan Beulich <jbeulich@suse.com>
|
|
# Date 1350465790 -7200
|
|
# Node ID 4b4c0c7a6031820ab521fdd6764cb0df157f44bf
|
|
# Parent 4fc87c2f31a02c770655518c9e4d389302564f00
|
|
x86/oprof: adjust off-by-one counter range checks
|
|
|
|
Signed-off-by: Jan Beulich <jbeulich@suse.com>
|
|
Acked-by: Keir Fraser <keir@xen.org>
|
|
|
|
--- a/xen/arch/x86/oprofile/xenoprof.c
|
|
+++ b/xen/arch/x86/oprofile/xenoprof.c
|
|
@@ -26,7 +26,7 @@ int xenoprof_arch_counter(XEN_GUEST_HAND
|
|
if ( copy_from_guest(&counter, arg, 1) )
|
|
return -EFAULT;
|
|
|
|
- if ( counter.ind > OP_MAX_COUNTER )
|
|
+ if ( counter.ind >= OP_MAX_COUNTER )
|
|
return -E2BIG;
|
|
|
|
counter_config[counter.ind].count = counter.count;
|
|
@@ -64,7 +64,7 @@ int compat_oprof_arch_counter(XEN_GUEST_
|
|
if ( copy_from_guest(&counter, arg, 1) )
|
|
return -EFAULT;
|
|
|
|
- if ( counter.ind > OP_MAX_COUNTER )
|
|
+ if ( counter.ind >= OP_MAX_COUNTER )
|
|
return -E2BIG;
|
|
|
|
counter_config[counter.ind].count = counter.count;
|