Insu Yun 85c0a87cd1 xen: fix potential integer overflow in queue_reply ... When len is greater than UINT_MAX - sizeof(*rb), in next allocation, it can overflow integer range and allocates small size of heap. After that, memcpy will overflow the allocated heap. Therefore, it needs to check the size of given length. Signed-off-by: Insu Yun <wuninsu@gmail.com> Signed-off-by: David Vrabel <david.vrabel@citrix.com>		2016-02-15 13:56:57 +00:00
..
events	xen/events/fifo: Consume unprocessed events when a CPU dies	2015-12-02 13:23:25 +00:00
xen-pciback	xen-pciback: fix up cleanup path when alloc fails	2015-12-18 11:38:48 -05:00
xenbus	xen: fix potential integer overflow in queue_reply	2016-02-15 13:56:57 +00:00
xenfs	xen: rename dom0_op to platform_op	2015-12-21 14:40:55 +00:00
acpi.c	xen: rename dom0_op to platform_op	2015-12-21 14:40:55 +00:00
balloon.c	xen/balloon: Use the correct sizeof when declaring frame_list	2015-10-23 14:20:44 +01:00
biomerge.c	xen/biomerge: Don't allow biovec's to be merged when Linux is not using 4KB pages	2015-10-23 14:20:36 +01:00
cpu_hotplug.c	xen, cpu_hotplug: call device_offline instead of cpu_down	2015-10-23 14:20:48 +01:00
dbgp.c	xen: Use dev_is_pci() to check whether it is pci device	2014-01-07 09:53:33 -05:00
efi.c	xen: rename dom0_op to platform_op	2015-12-21 14:40:55 +00:00
evtchn.c	xen/evtchn: dynamically grow pending event channel ring	2015-11-26 18:49:54 +00:00
fallback.c	xen-pciback: notify hypervisor about devices intended to be assigned to guests	2013-03-22 10:20:55 -04:00
features.c
gntalloc.c	Merge branch 'akpm' (patches from Andrew)	2015-09-10 18:19:42 -07:00
gntdev.c	xen/gntdev: add ioctl for grant copy	2016-01-07 13:21:53 +00:00
grant-table.c	xen/grant-table: constify gnttab_ops structure	2015-12-21 14:41:01 +00:00
Kconfig	xen/PMU: Sysfs interface for setting Xen PMU mode	2015-08-20 12:24:26 +01:00
Makefile	xen: move xen_setup_runstate_info and get_runstate_snapshot to drivers/xen/time.c	2015-12-21 14:40:52 +00:00
manage.c	xen: Use correctly the Xen memory terminologies	2015-09-08 18:03:49 +01:00
mcelog.c	xen/mce: fix up xen_late_init_mcelog() error handling	2015-03-16 14:49:15 +00:00
pci.c	xen/pci: Try harder to get PXM information for Xen	2015-04-15 10:57:28 +01:00
pcpu.c	xen: rename dom0_op to platform_op	2015-12-21 14:40:55 +00:00
platform-pci.c	drivers: xen: Mark function as static in platform-pci.c	2014-02-28 15:26:04 -05:00
preempt.c	xen/preempt: use need_resched() instead of should_resched()	2015-08-20 12:24:14 +01:00
privcmd.c	xen/privcmd: Add support for Linux 64KB page granularity	2015-10-23 14:20:42 +01:00
privcmd.h	xen: Add privcmd device driver	2011-12-16 13:29:31 -05:00
swiotlb-xen.c	xen/swiotlb: Add support for 64KB page granularity	2015-10-23 14:20:43 +01:00
sys-hypervisor.c	xen/PMU: Sysfs interface for setting Xen PMU mode	2015-08-20 12:24:26 +01:00
time.c	xen/time: use READ_ONCE	2015-12-21 14:41:00 +00:00
tmem.c	xen/tmem: Use xen_page_to_gfn rather than pfn_to_gfn	2015-09-08 18:03:52 +01:00
xen-acpi-cpuhotplug.c	xen: rename dom0_op to platform_op	2015-12-21 14:40:55 +00:00
xen-acpi-memhotplug.c	ACPICA: Resources: Provide common part for struct acpi_resource_address structures.	2015-01-26 16:09:56 +01:00
xen-acpi-pad.c	xen: rename dom0_op to platform_op	2015-12-21 14:40:55 +00:00
xen-acpi-processor.c	xen: rename dom0_op to platform_op	2015-12-21 14:40:55 +00:00
xen-balloon.c	xen: balloon: Use static attribute groups for sysfs entries	2015-03-16 14:49:13 +00:00
xen-scsiback.c	xen/scsiback: avoid warnings when adding multiple LUNs to a domain	2016-02-08 16:51:36 +00:00
xen-selfballoon.c	drivers:xen-selfballoon:reset 'frontswap_inertia_counter' after frontswap_shrink	2014-02-28 15:26:12 -05:00
xen-stub.c	xen/acpi: remove redundant acpi/acpi_drivers.h include	2013-03-11 13:53:02 -04:00
xlate_mmu.c	xen/privcmd: Add support for Linux 64KB page granularity	2015-10-23 14:20:42 +01:00