]> xenbits.xensource.com Git - xen.git/commit
projects / xen.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 15b2980) | patch
memory: fix off-by-one in XSA-346 change
authorJan Beulich <jbeulich@suse.com>
Tue, 24 Nov 2020 13:17:37 +0000 (14:17 +0100)
committerJan Beulich <jbeulich@suse.com>
Tue, 24 Nov 2020 13:17:37 +0000 (14:17 +0100)
commit17ec9b43af072051edb1380a5eb459a382dcafa3
tree61c7a25a753786ed6a3355c17f3df758fddbb56btree
parent15b298097289f1c11b981454a3dc912b95e2f65bcommit | diff
memory: fix off-by-one in XSA-346 change

The comparison against ARRAY_SIZE() needs to be >= in order to avoid
overrunning the pages[] array.

This is XSA-355.

Fixes: 5777a3742d88 ("IOMMU: hold page ref until after deferred TLB flush")
Signed-off-by: Jan Beulich <jbeulich@suse.com>
Reviewed-by: Julien Grall <jgrall@amazon.com>
master commit: 9b156bcc3ffcc7949edd4460b718a241e87ae302
master date: 2020-11-24 14:01:31 +0100
xen/common/memory.c diff | blob | blame | history
Xen (staging and unstable) mirror