qemu/hw/block
Stefano Stabellini b0ac694fdb xen/disk: don't leak stack data via response ring
Rather than constructing a local structure instance on the stack, fill
the fields directly on the shared ring, just like other (Linux)
backends do. Build on the fact that all response structure flavors are
actually identical (aside from alignment and padding at the end).

This is XSA-216.

Reported by: Anthony Perard <anthony.perard@citrix.com>
Signed-off-by: Jan Beulich <jbeulich@suse.com>
Signed-off-by: Stefano Stabellini <sstabellini@kernel.org>
Acked-by: Anthony PERARD <anthony.perard@citrix.com>
2017-06-27 14:45:34 -07:00
..
dataplane virtio: Report real progress in VQ aio poll handler 2017-02-17 21:52:30 +02:00
block.c hw/block: Introduce share-rw qdev property 2017-02-28 20:40:36 +01:00
cdrom.c block: Clean up includes 2016-01-20 13:36:23 +01:00
ecc.c block: Clean up includes 2016-01-20 13:36:23 +01:00
fdc.c qdev: Rename DEFINE_PROP_DEFAULT() to DEFINE_PROP_SIGNED() 2017-06-20 14:31:32 +02:00
hd-geometry.c qemu-common: stop including qemu/bswap.h from qemu-common.h 2016-05-19 16:42:28 +02:00
m25p80.c hw/block: Request permissions 2017-02-28 20:40:36 +01:00
Makefile.objs xen: do not build backends for targets that do not support xen 2017-03-19 11:12:12 +01:00
nand.c hw/block: Request permissions 2017-02-28 20:40:36 +01:00
nvme.c nvme: Add support for Read Data and Write Data in CMBs. 2017-06-26 14:51:13 +02:00
nvme.h nvme: Add support for Read Data and Write Data in CMBs. 2017-06-26 14:51:13 +02:00
onenand.c hw/block: Request permissions 2017-02-28 20:40:36 +01:00
pflash_cfi01.c hw/block: Request permissions 2017-02-28 20:40:36 +01:00
pflash_cfi02.c hw/block: Request permissions 2017-02-28 20:40:36 +01:00
tc58128.c block: Use DIV_ROUND_UP 2016-06-07 18:19:24 +03:00
trace-events trace: move hw/block/dataplane events to correct subdir 2017-01-31 17:11:17 +00:00
virtio-blk.c virtio-blk: Remove useless condition around g_free() 2017-05-10 10:19:23 +03:00
xen_blkif.h xen: import ring.h from xen 2017-04-21 12:41:29 -07:00
xen_disk.c xen/disk: don't leak stack data via response ring 2017-06-27 14:45:34 -07:00