]> xenbits.xensource.com Git - xen.git/commit
libxl: Use zero-ed memory for PVH acpi tables
authorJason Andryuk <jason.andryuk@amd.com>
Tue, 12 Nov 2024 13:15:02 +0000 (14:15 +0100)
committerJan Beulich <jbeulich@suse.com>
Tue, 12 Nov 2024 13:15:02 +0000 (14:15 +0100)
commit78f66ae66f9f6e885bc7a4e3a135094966da41c4
tree9c02f3df904a96a17dd6c802d30ecd1659ebfcdb
parent1eb843cd2401ea8c228d8e9061521751d5c7df44
libxl: Use zero-ed memory for PVH acpi tables

xl/libxl memory is leaking into a PVH guest through uninitialized
portions of the ACPI tables.

Use libxl_zalloc() to obtain zero-ed memory to avoid this issue.

This is XSA-464 / CVE-2024-45819.

Signed-off-by: Jason Andryuk <jason.andryuk@amd.com>
Fixes: 14c0d328da2b ("libxl/acpi: Build ACPI tables for HVMlite guests")
Reviewed-by: Jan Beulich <jbeulich@suse.com>
master commit: 0bfe567b58f1182889dea9207103fc9d00baf414
master date: 2024-11-12 13:32:45 +0100
tools/libs/light/libxl_x86_acpi.c