]> www.infradead.org Git - users/jedix/linux-maple.git/commit
blkback/blktap: don't leak stack data via response ring v4.1.12-104.0.20170620_1200
authorJan Beulich <jbeulich@suse.com>
Tue, 20 Jun 2017 17:47:18 +0000 (10:47 -0700)
committerChuck Anderson <chuck.anderson@oracle.com>
Tue, 20 Jun 2017 17:47:18 +0000 (10:47 -0700)
commite088972647057fb6989941b88898521fd61a2733
tree3ad4017cf0eac756f1c56ccf536c48c6d9ea129d
parentf991dabb6e9abaf08faf1196708513ca21b2a75d
blkback/blktap: don't leak stack data via response ring

Rather than constructing a local structure instance on the stack, fill
the fields directly on the shared ring, just like other backends do.
Build on the fact that all response structure flavors are actually
identical (the old code did make this assumption too).

This is XSA-216.

Reported-by: Anthony Perard <anthony.perard@citrix.com>
Signed-off-by: Jan Beulich <jbeulich@suse.com>
Reviewed-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
Orabug: 26315576
Signed-off-by: Chuck Anderson <chuck.anderson@oracle.com>
Conflicts:
drivers/block/xen-blkback/blkback.c (code base)
drivers/block/xen-blkback/blkback.c
drivers/block/xen-blkback/common.h