mirror of
https://github.com/xen-project/xen.git
synced 2026-10-28 02:01:24 +01:00
x86: fix null pointer dereference in intel_get_extended_msrs()
`memset(&mc_ext, 0, ...)' leads to a buffer overflow and a subsequent null pointer dereference. Replace `&mc_ext' with `mc_ext'. Signed-off-by: Xi Wang <xi@mit.edu>
This commit is contained in:
1 parent
4291b626ce
commit
c40e24a8ef
1 file changed
+1
-1
@@ -200,7 +200,7 @@ intel_get_extended_msrs(struct mcinfo_global *mig, struct mc_info *mi)
|
||||
}
|
||||
|
||||
/* this function will called when CAP(9).MCG_EXT_P = 1 */
|
||||
memset(&mc_ext, 0, sizeof(struct mcinfo_extended));
|
||||
memset(mc_ext, 0, sizeof(*mc_ext));
|
||||
mc_ext->common.type = MC_TYPE_EXTENDED;
|
||||
mc_ext->common.size = sizeof(struct mcinfo_extended);
|
||||
|
||||
|
||||