]> xenbits.xensource.com Git - xen.git/commit
projects / xen.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 518ae14) | patch
domctl: don't allow a toolstack domain to call domain_pause() on itself
authorAndrew Cooper <andrew.cooper3@citrix.com>
Wed, 1 Apr 2015 09:10:31 +0000 (10:10 +0100)
committerIan Campbell <ian.campbell@citrix.com>
Wed, 1 Apr 2015 09:14:42 +0000 (10:14 +0100)
commit6b09a29ced2e7fc449a39f513e1d8c2b10d2af6d
tree46eb7bc31bffcf1e7a0bffc4ebf89c9c2e787702tree
parent518ae14973a44228fd7158c3d70270df6ed90033commit | diff
domctl: don't allow a toolstack domain to call domain_pause() on itself

These DOMCTL subops were accidentally declared safe for disaggregation
in the wake of XSA-77.

This is XSA-127 / CVE-2015-2751.

Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
Reviewed-by: Jan Beulich <jbeulich@suse.com>
Acked-by: Ian Campbell <ian.campbell@citrix.com>
xen/arch/x86/domctl.c diff | blob | blame | history
xen/common/domctl.c diff | blob | blame | history
Xen (staging and unstable) mirror