26 lines
741 B
Diff
26 lines
741 B
Diff
|
# Commit d46896ebbb23f3a9fef2eb6066ae614fd1acfd96
|
||
|
|
# Date 2015-10-29 13:35:40 +0100
|
||
|
|
# Author Jan Beulich <jbeulich@suse.com>
|
||
|
|
# Committer Jan Beulich <jbeulich@suse.com>
|
||
|
|
free domain's vcpu array
|
||
|
|
|
||
|
|
This was overlooked in fb442e2171 ("x86_64: allow more vCPU-s per
|
||
|
|
guest").
|
||
|
|
|
||
|
|
This is CVE-2015-7969 / XSA-149.
|
||
|
|
|
||
|
|
Reported-by: Ian Campbell <ian.campbell@citrix.com>
|
||
|
|
Signed-off-by: Jan Beulich <jbeulich@suse.com>
|
||
|
|
Reviewed-by: Ian Campbell <ian.campbell@citrix.com>
|
||
|
|
|
||
|
|
--- a/xen/common/domain.c
|
||
|
|
+++ b/xen/common/domain.c
|
||
|
|
@@ -833,6 +833,7 @@ static void complete_domain_destroy(stru
|
||
|
|
|
||
|
|
xsm_free_security_domain(d);
|
||
|
|
free_cpumask_var(d->domain_dirty_cpumask);
|
||
|
|
+ xfree(d->vcpu);
|
||
|
|
free_domain_struct(d);
|
||
|
|
|
||
|
|
send_global_virq(VIRQ_DOM_EXC);
|