xsm, argo: notify: don't describe rings that cannot be sent to

Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com>
Acked-by: Daniel De Graaf <dgdegra@tycho.nsa.gov>
Tested-by: Chris Patterson <pattersonc@ainfosec.com>
Release-acked-by: Juergen Gross <jgross@suse.com>

diff --git a/xen/common/argo.c b/xen/common/argo.c
index 7523f32af5693f2fa75504f8b2a289ecee61eff3..13052b923949ab2078930d984aef9745c0bf3932 100644 (file)
--- a/xen/common/argo.c
+++ b/xen/common/argo.c
@@ -1342,6 +1342,17 @@ fill_ring_data(const struct domain *currd,
     if ( !dst_d || !dst_d->argo )
         goto out;
 
+    /*
+     * Don't supply information about rings that a guest is not
+     * allowed to send to.
+     */
+    ret = xsm_argo_send(currd, dst_d);
+    if ( ret )
+    {
+        put_domain(dst_d);
+        return ret;
+    }
+
     read_lock(&dst_d->argo->rings_L2_rwlock);
 
     ring_info = find_ring_info_by_match(dst_d, ent.ring.aport,