xen-ia64-devel

[Top] [All Lists]

[Xen-ia64-devel] [PATCH] Fix security vulnerability

from [Kouya Shimura]

[Permanent Link][Original]

To:	xen-ia64-devel@xxxxxxxxxxxxxxxxxxx
Subject:	[Xen-ia64-devel] [PATCH] Fix security vulnerability
From:	Kouya Shimura <kouya@xxxxxxxxxxxxxx>
Date:	Tue, 15 Jan 2008 15:52:45 +0900
Delivery-date:	Mon, 14 Jan 2008 22:53:06 -0800
Envelope-to:	www-data@xxxxxxxxxxxxxxxxxx
List-help:	<mailto:xen-ia64-devel-request@lists.xensource.com?subject=help>
List-id:	Discussion of the ia64 port of Xen <xen-ia64-devel.lists.xensource.com>
List-post:	<mailto:xen-ia64-devel@lists.xensource.com>
List-subscribe:	<http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-ia64-devel>, <mailto:xen-ia64-devel-request@lists.xensource.com?subject=subscribe>
List-unsubscribe:	<http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-ia64-devel>, <mailto:xen-ia64-devel-request@lists.xensource.com?subject=unsubscribe>
Sender:	xen-ia64-devel-bounces@xxxxxxxxxxxxxxxxxxx

DomU can map any other domain's memory.

Signed-off-by: Kouya Shimura <kouya@xxxxxxxxxxxxxx>

diff -r 45d16899a21d xen/arch/ia64/xen/dom0_ops.c
--- a/xen/arch/ia64/xen/dom0_ops.c      Sun Jan 13 10:50:18 2008 +0000
+++ b/xen/arch/ia64/xen/dom0_ops.c      Tue Jan 15 15:39:17 2008 +0900
@@ -522,10 +522,14 @@ do_dom0vp_op(unsigned long cmd,
         ret = dom0vp_zap_physmap(d, arg0, (unsigned int)arg1);
         break;
     case IA64_DOM0VP_add_physmap:
+        if ( !IS_PRIV(d) )
+            return -EPERM;
         ret = dom0vp_add_physmap(d, arg0, arg1, (unsigned int)arg2,
                                  (domid_t)arg3);
         break;
     case IA64_DOM0VP_add_physmap_with_gmfn:
+        if ( !IS_PRIV(d) )
+            return -EPERM;
         ret = dom0vp_add_physmap_with_gmfn(d, arg0, arg1, (unsigned int)arg2,
                                            (domid_t)arg3);
         break;

_______________________________________________
Xen-ia64-devel mailing list
Xen-ia64-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-ia64-devel

[More with this subject...]

<Prev in Thread]	Current Thread	[Next in Thread>
[Xen-ia64-devel] [PATCH] Fix security vulnerability, Kouya Shimura <= Re: [Xen-ia64-devel] [PATCH] Fix security vulnerability, Isaku Yamahata Re: [Xen-ia64-devel] [PATCH] Fix security vulnerability, Kouya Shimura

Previous by Date:	[Xen-ia64-devel] [PATCH] xenoprof/IA64 HOWTO, Isaku Yamahata
Next by Date:	Re: [Xen-ia64-devel] [PATCH] Fix security vulnerability, Isaku Yamahata
Previous by Thread:	[Xen-ia64-devel] [PATCH] xenoprof/IA64 HOWTO, Isaku Yamahata
Next by Thread:	Re: [Xen-ia64-devel] [PATCH] Fix security vulnerability, Isaku Yamahata
Indexes:	[Date] [Thread] [Top] [All Lists]