Jason Andryuk 78f66ae66f libxl: Use zero-ed memory for PVH acpi tables ...

xl/libxl memory is leaking into a PVH guest through uninitialized
portions of the ACPI tables.

Use libxl_zalloc() to obtain zero-ed memory to avoid this issue.

This is XSA-464 / CVE-2024-45819.

Signed-off-by: Jason Andryuk <jason.andryuk@amd.com>
Fixes: 14c0d328da ("libxl/acpi: Build ACPI tables for HVMlite guests")
Reviewed-by: Jan Beulich <jbeulich@suse.com>
master commit: 0bfe567b58
master date: 2024-11-12 13:32:45 +0100

2024-11-12 14:15:02 +01:00

..

console

tools/console: use xenforeigmemory to map console ring

2021-10-11 12:05:38 +01:00

debugger

tools: Remove the use of K&R functions

2023-07-18 10:25:20 +02:00

examples

examples: Add PVH example to config example list

2020-12-15 15:51:58 +00:00

firmware

tools/firmware: do not add a .note.gnu.property section

2022-04-06 10:20:44 +02:00

flask

build: add --full to version.sh to guess $(XEN_FULLVERSION)

2021-09-29 15:29:55 +01:00

fuzz

libx86: Update library API for cpu_policy

2023-08-08 16:02:53 +01:00

golang

golang/xenlight: regen generated code

2021-11-19 14:33:55 +00:00

helpers

tools/xenstore: make the internal memory data base the default

2022-11-01 14:07:24 +00:00

hotplug

tools: fix oom setting of xenstored

2021-10-19 12:23:34 +01:00

include

libxl: change the type of libxl_cpuid_policy_list

2023-08-08 16:02:54 +01:00

libacpi

libacpi: fix PCI hotplug AML

2023-03-21 13:53:25 +01:00

libfsimage

tools/libfsimage: Export a new function to preload all plugins

2023-09-27 16:29:50 +01:00

libs

libxl: Use zero-ed memory for PVH acpi tables

2024-11-12 14:15:02 +01:00

misc

x86/spec-ctrl: Expose BHI_CTRL to guests

2024-04-09 17:10:28 +01:00

ocaml

x86/sysctl: Retrofit XEN_SYSCTL_cpu_featureset_{pv,hvm}_max

2023-08-08 16:02:53 +01:00

pygrub

tools/pygrub: Deprivilege pygrub

2023-09-27 16:29:50 +01:00

python

tools/python: change 's#' size type for Python >= 3.10

2023-03-21 13:49:28 +01:00

tests

x86/tsx: Expose RTM_ALWAYS_ABORT to guests

2024-04-09 17:10:28 +01:00

vchan

tools: split libxenvchan into new tools/libs/vchan directory

2020-09-09 10:57:25 +00:00

xcutils

tools/xcutils: use official headers in readnotes

2020-09-09 10:57:25 +00:00

xenmon

tools/xenmon: Fix xenmon.py for with python3.x

2023-03-21 13:49:47 +01:00

xenpaging

tools/xenpaging: include errno.h

2021-01-18 18:58:20 +00:00

xenpmd

xenpmd.c: Remove hard tab

2021-02-01 15:18:36 +00:00

xenstore

tools/xenstored: domain_entry_fix(): Handle conflicting transaction

2023-09-27 16:29:50 +01:00

xentop

tools/top: The string parameter in set_prompt() and set_delay() should be const

2021-05-18 14:54:05 +01:00

xentrace

tools: convert bitfields to unsigned type

2023-07-17 08:32:19 +02:00

xl

libxl: use the cpuid feature names from cpufeatureset.h

2023-08-08 16:02:54 +01:00

config.h.in

tools: drop bogus and obsolete ptyfuncs.m4

2023-08-08 12:33:49 +01:00

configure

tools: drop bogus and obsolete ptyfuncs.m4

2023-08-08 12:33:49 +01:00

configure.ac

tools: drop bogus and obsolete ptyfuncs.m4

2023-08-08 12:33:49 +01:00

cross-install

…

Makefile

tools: Fix build with recent QEMU, use "--enable-trace-backends"

2023-02-07 17:03:51 +01:00

Rules.mk

Turn off debug by default

2021-11-23 16:43:49 +00:00