Daniel De Graaf 2512f298cb xen/gntdev: fix unsafe vma access ...

In gntdev_ioctl_get_offset_for_vaddr, we need to hold mmap_sem while
calling find_vma() to avoid potentially having the result freed out from
under us.  Similarly, the MMU notifier functions need to synchronize with
gntdev_vma_close to avoid map->vma being freed during their iteration.

Signed-off-by: Daniel De Graaf <dgdegra@tycho.nsa.gov>
Reported-by: Al Viro <viro@ZenIV.linux.org.uk>
Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>

2013-01-15 16:01:06 -05:00

..

xen-pciback

x86/xen : Fix the wrong check in pciback

2013-01-15 15:56:48 -05:00

xenbus

Linux 3.7

2013-01-15 15:58:25 -05:00

xenfs

…

acpi.c

…

balloon.c

xen: balloon: allow PVMMU interfaces to be compiled out

2012-11-29 12:59:13 +00:00

biomerge.c

…

cpu_hotplug.c

Xen: properly bound buffer access when parsing cpu/*/availability

2013-01-15 15:57:02 -05:00

dbgp.c

…

events.c

xen/events: fix RCU warning, or Call idle notifier after irq_enter()

2012-11-07 10:41:27 -05:00

evtchn.c

…

fallback.c

xen/hypercall: fix hypercall fallback code for very old hypervisors

2012-11-04 10:40:42 -05:00

features.c

…

gntalloc.c

…

gntdev.c

xen/gntdev: fix unsafe vma access

2013-01-15 16:01:06 -05:00

grant-table.c

xen/grant-table: correctly initialize grant table version 1

2013-01-15 15:56:55 -05:00

Kconfig

xen: balloon: allow PVMMU interfaces to be compiled out

2012-11-29 12:59:13 +00:00

Makefile

Linux 3.7

2013-01-15 15:58:25 -05:00

manage.c

…

mcelog.c

…

pci.c

…

pcpu.c

…

platform-pci.c

…

privcmd.c

xen/privcmd: Fix mmap batch ioctl.

2013-01-15 16:00:52 -05:00

privcmd.h

…

swiotlb-xen.c

…

sys-hypervisor.c

…

tmem.c

…

xen-acpi-pad.c

xen/acpi: Move the xen_running_on_version_or_later function.

2012-11-28 14:39:31 -05:00

xen-acpi-processor.c

…

xen-balloon.c

…

xen-selfballoon.c

…

xencomm.c

…