WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-ia64-devel

Re: [Xen-ia64-devel] [PATCH] Fix vulnerability of copy_to_user in PAL em

To: Tristan Gingold <tgingold@xxxxxxx>
Subject: Re: [Xen-ia64-devel] [PATCH] Fix vulnerability of copy_to_user in PAL emulation
From: Tristan Gingold <tgingold@xxxxxxx>
Date: Wed, 12 Dec 2007 07:17:21 +0100
Cc: Alex Williamson <alex.williamson@xxxxxx>, xen-ia64-devel@xxxxxxxxxxxxxxxxxxx
Delivery-date: Tue, 11 Dec 2007 22:10:43 -0800
Envelope-to: www-data@xxxxxxxxxxxxxxxxxx
In-reply-to: <20071212051534.GA2535@saphi>
List-help: <mailto:xen-ia64-devel-request@lists.xensource.com?subject=help>
List-id: Discussion of the ia64 port of Xen <xen-ia64-devel.lists.xensource.com>
List-post: <mailto:xen-ia64-devel@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-ia64-devel>, <mailto:xen-ia64-devel-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-ia64-devel>, <mailto:xen-ia64-devel-request@lists.xensource.com?subject=unsubscribe>
References: <7k8x41puy7.fsf@xxxxxxxxxxxxxxxxxxxxxxxxxx> <1197391269.7945.43.camel@lappy> <7k63z4pnda.fsf@xxxxxxxxxxxxxxxxxxxxxxxxxx> <20071212051534.GA2535@saphi>
Sender: xen-ia64-devel-bounces@xxxxxxxxxxxxxxxxxxx
User-agent: Mutt/1.5.9i
On Wed, Dec 12, 2007 at 06:15:34AM +0100, Tristan Gingold wrote:
> On Wed, Dec 12, 2007 at 01:07:13PM +0900, Kouya Shimura wrote:
> Content-Description: message body text
> > Hi Alex,
> > 
> > Thank you for reviewing. 
> > I updated the patch as your comments. please apply.
> > I also long for a xencomm.
> 
> For xencomm, I was maybe a little bit optimistic.  Xencomm requires a buffer
> in RAM, which is not esay (or possible) for static convention.  So we have
> to pass the content through registers...

My latest idea on this subject:

The buffers are small: 64 bytes.  So, instead of passing a buffer address,
return the buffer by register (using scratch register r14-r21).  The PAL
stub can then save it to memory.  I think this approach is the simplest
one.

Tristan.

_______________________________________________
Xen-ia64-devel mailing list
Xen-ia64-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-ia64-devel