23 lines
569 B
Diff
23 lines
569 B
Diff
|
References: CVE-2012-5525 XSA-32 bnc#789952
|
||
|
|
|
||
|
|
x86: get_page_from_gfn() must return NULL for invalid GFNs
|
||
|
|
|
||
|
|
... also in the non-translated case.
|
||
|
|
|
||
|
|
This is XSA-32 / CVE-2012-5525.
|
||
|
|
|
||
|
|
Signed-off-by: Jan Beulich <jbeulich@suse.com>
|
||
|
|
Acked-by: Tim Deegan <tim@xen.org>
|
||
|
|
|
||
|
|
--- a/xen/include/asm-x86/p2m.h
|
||
|
|
+++ b/xen/include/asm-x86/p2m.h
|
||
|
|
@@ -400,7 +400,7 @@ static inline struct page_info *get_page
|
||
|
|
if (t)
|
||
|
|
*t = p2m_ram_rw;
|
||
|
|
page = __mfn_to_page(gfn);
|
||
|
|
- return get_page(page, d) ? page : NULL;
|
||
|
|
+ return mfn_valid(gfn) && get_page(page, d) ? page : NULL;
|
||
|
|
}
|
||
|
|
|
||
|
|
|