x86/xen: avoid writing to freed memory after race in p2m handling

Browse source

In case a race was detected during allocation of a new p2m tree
element in alloc_p2m() the new allocated mid_mfn page is freed without
updating the pointer to the found value in the tree. This will result
in overwriting the just freed page with the mfn of the p2m leaf.

Signed-off-by: Juergen Gross <jgross@suse.com>
Signed-off-by: David Vrabel <david.vrabel@citrix.com>

...

This commit is contained in:

Juergen Gross 2014-10-14 11:00:18 +02:00 • committed by David Vrabel

parent fd8b795113

commit 239af7c713

1 changed files with 6 additions and 2 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

8

arch/x86/xen/p2m.c

View file