ChangeSet 1.1686, 2005/06/06 17:04:03+01:00, kaf24@xxxxxxxxxxxxxxxxxxxx
cpu_gdt_init() could allocate a frame array one element too small. Now
it is fixed size and guaranteed big enough. Spotted by George Dunlap.
Signed-off-by: Keir Fraser <keir@xxxxxxxxxxxxx>
i386/kernel/cpu/common.c | 2 +-
x86_64/kernel/setup64.c | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff -Nru a/linux-2.6.11-xen-sparse/arch/xen/i386/kernel/cpu/common.c
b/linux-2.6.11-xen-sparse/arch/xen/i386/kernel/cpu/common.c
--- a/linux-2.6.11-xen-sparse/arch/xen/i386/kernel/cpu/common.c 2005-06-06
13:02:46 -04:00
+++ b/linux-2.6.11-xen-sparse/arch/xen/i386/kernel/cpu/common.c 2005-06-06
13:02:46 -04:00
@@ -554,7 +554,7 @@
void __init cpu_gdt_init(struct Xgt_desc_struct *gdt_descr)
{
- unsigned long frames[gdt_descr->size >> PAGE_SHIFT];
+ unsigned long frames[16];
unsigned long va;
int f;
diff -Nru a/linux-2.6.11-xen-sparse/arch/xen/x86_64/kernel/setup64.c
b/linux-2.6.11-xen-sparse/arch/xen/x86_64/kernel/setup64.c
--- a/linux-2.6.11-xen-sparse/arch/xen/x86_64/kernel/setup64.c 2005-06-06
13:02:46 -04:00
+++ b/linux-2.6.11-xen-sparse/arch/xen/x86_64/kernel/setup64.c 2005-06-06
13:02:46 -04:00
@@ -208,7 +208,7 @@
void __init cpu_gdt_init(struct desc_ptr *gdt_descr)
{
- unsigned long frames[gdt_descr->size >> PAGE_SHIFT];
+ unsigned long frames[16];
unsigned long va;
int f;
_______________________________________________
Xen-changelog mailing list
Xen-changelog@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-changelog
|