Roger Pau Monné
288b2385b8
xen/privcmd: fix integer truncation in IOCTL_PRIVCMD_MMAPBATCH ...
The size field in the XENMEM_add_to_physmap_range is an uint16_t, and the
privcmd driver was doing an implicit truncation of an int into an uint16_t
when filling the hypercall parameters.
Fix this by adding a loop and making sure privcmd splits ioctl request into
2^16 chunks when issuing the hypercalls.
Reported and tested by: Marcin Cieslak <saper@saper.info>
Sponsored by: Citrix Systems R&D
2016-05-06 16:44:46 +00:00
2016-05-05 22:26:23 +00:00
2016-05-06 08:59:25 +00:00
2016-05-05 22:26:23 +00:00
2016-05-05 00:07:08 +00:00
2016-05-06 15:36:25 +00:00
2016-05-05 13:54:50 +00:00
2016-04-30 00:53:10 +00:00
2016-05-05 22:26:23 +00:00
2016-04-30 06:48:48 +00:00
2016-04-20 03:05:32 +00:00
2016-05-02 19:32:06 +00:00
2016-05-06 16:44:46 +00:00
2016-04-30 16:01:37 +00:00
2016-04-30 14:41:18 +00:00
2016-04-20 14:29:03 +00:00
2016-05-05 22:26:23 +00:00
2016-05-03 21:51:52 +00:00
2016-05-06 08:54:00 +00:00
2016-05-03 22:05:03 +00:00
2016-04-30 14:41:18 +00:00
2016-05-06 05:24:10 +00:00
2016-05-05 17:55:10 +00:00
2016-05-04 22:34:11 +00:00
2016-05-06 11:41:49 +00:00
2016-04-29 21:25:05 +00:00
2016-05-03 18:05:43 +00:00
2016-05-03 18:05:43 +00:00
2016-05-03 18:05:43 +00:00
2016-04-19 23:48:27 +00:00
2016-05-06 03:18:51 +00:00
2016-05-03 18:05:43 +00:00
2016-04-29 16:07:25 +00:00
2016-04-21 15:38:28 +00:00
2016-05-06 15:37:06 +00:00
2016-04-29 23:53:55 +00:00
2016-05-05 22:26:23 +00:00
2016-04-26 14:38:18 +00:00
2016-05-06 01:49:46 +00:00
2016-04-21 19:40:10 +00:00
2016-05-04 15:52:40 +00:00
2016-05-06 16:41:23 +00:00
2016-02-02 07:02:51 +00:00
2016-04-29 20:43:51 +00:00
2016-05-02 20:16:29 +00:00
2016-05-03 20:14:04 +00:00
2016-04-14 17:06:37 +00:00
2016-01-15 14:34:31 +00:00
2016-02-29 16:39:27 +00:00
288b2385b8