[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Xen-devel] [PATCH] [v2] xen: hypercall: fix out-of-bounds memcpy

To: Arnd Bergmann <arnd@xxxxxxxx>
From: Nicolas Pitre <nico@xxxxxxxxxxx>
Date: Mon, 5 Feb 2018 10:51:10 -0500 (EST)
Cc: Juergen Gross <jgross@xxxxxxxx>, linux-kernel@xxxxxxxxxxxxxxx, David Laight <David.Laight@xxxxxxxxxx>, xen-devel@xxxxxxxxxxxxxxxxxxxx, Boris Ostrovsky <boris.ostrovsky@xxxxxxxxxx>, Dan Carpenter <dan.carpenter@xxxxxxxxxx>
Delivery-date: Mon, 05 Feb 2018 16:25:59 +0000
List-id: Xen developer discussion <xen-devel.lists.xenproject.org>

On Mon, 5 Feb 2018, Arnd Bergmann wrote:

> +     if (cmd > ARRAY_SIZE(evtchnop_len))
> +             return -ENOSYS;
> +     len = evtchnop_len[cmd];

What if cmd == ARRAY_SIZE(evtchnop_len) ?


Nicolas

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxxx
https://lists.xenproject.org/mailman/listinfo/xen-devel

References:
- [Xen-devel] [PATCH] [v2] xen: hypercall: fix out-of-bounds memcpy
  - From: Arnd Bergmann

Prev by Date: Re: [Xen-devel] [PATCH] xen: Improvements to domain_crash_sync()
Next by Date: Re: [Xen-devel] [PATCH] x86/emul: Adjustments to exception error code handling
Previous by thread: Re: [Xen-devel] [PATCH] [v2] xen: hypercall: fix out-of-bounds memcpy
Next by thread: [Xen-devel] [PATCH v4 0/8] ARM: VGIC/GIC separation cleanups
Index(es):
- Date
- Thread

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.