9621add6e3
support qcow2, so blktap is needed to support domains with 'tap:qcow2' disk configurations. modified tmp-initscript-modprobe.patch - bnc#809203 - xen.efi isn't signed with SUSE Secure Boot key xen.spec - Fix adding managed PCI device to an inactive domain modified xen-managed-pci-device.patch - bnc#805094 - xen hot plug attach/detach fails modified blktap-pv-cdrom.patch - bnc# 802690 - domain locking can prevent a live migration from completing modified xend-domain-lock.patch - bnc#797014 - no way to control live migrations 26675-tools-xentoollog_update_tty_detection_in_stdiostream_progress.patch xen.migrate.tools-xc_print_messages_from_xc_save_with_xc_report.patch xen.migrate.tools-xc_document_printf_calls_in_xc_restore.patch xen.migrate.tools-xc_rework_xc_save.cswitch_qemu_logdirty.patch xen.migrate.tools_set_migration_constraints_from_cmdline.patch xen.migrate.tools_add_xm_migrate_--log_progress_option.patch - Upstream patches from Jan 26585-x86-mm-Take-the-p2m-lock-even-in-shadow-mode.patch 26595-x86-nhvm-properly-clean-up-after-failure-to-set-up-all-vCPU-s.patch 26601-honor-ACPI-v4-FADT-flags.patch OBS-URL: https://build.opensuse.org/package/show/Virtualization/xen?expand=0&rev=232
23 lines
810 B
Diff
23 lines
810 B
Diff
# Commit c40e24a8ef74f9d0ee59dd9b8ca890be08b0b874
|
|
# Date 2013-02-25 12:44:25 +0100
|
|
# Author Xi Wang <xi@mit.edu>
|
|
# Committer Jan Beulich <jbeulich@suse.com>
|
|
x86: fix null pointer dereference in intel_get_extended_msrs()
|
|
|
|
`memset(&mc_ext, 0, ...)' leads to a buffer overflow and a subsequent
|
|
null pointer dereference. Replace `&mc_ext' with `mc_ext'.
|
|
|
|
Signed-off-by: Xi Wang <xi@mit.edu>
|
|
|
|
--- a/xen/arch/x86/cpu/mcheck/mce_intel.c
|
|
+++ b/xen/arch/x86/cpu/mcheck/mce_intel.c
|
|
@@ -534,7 +534,7 @@ intel_get_extended_msrs(struct mcinfo_gl
|
|
}
|
|
|
|
/* this function will called when CAP(9).MCG_EXT_P = 1 */
|
|
- memset(&mc_ext, 0, sizeof(struct mcinfo_extended));
|
|
+ memset(mc_ext, 0, sizeof(*mc_ext));
|
|
mc_ext->common.type = MC_TYPE_EXTENDED;
|
|
mc_ext->common.size = sizeof(struct mcinfo_extended);
|
|
|