Ian Campbell 5cd1c73043 tools: xenstored: if the reply is too big then send E2BIG error ...

This fixes the issue for both C and ocaml xenstored, however only the ocaml
xenstored is vulnerable in its default configuration.

Adding a new error appears to be safe, since bit libxenstore and the Linux
driver at least treat an unknown error code as EINVAL.

This is XSA-72 / CVE-2013-4416.

Original ocaml patch by Jerome Maloberti <jerome.maloberti@citrix.com>
Signed-off-by: Ian Campbell <ian.campbell@citrix.com>
Signed-off-by: Thomas Sanders <thomas.sanders@citrix.com>
master commit: 8b2c441a1b
master date: 2013-10-29 15:45:53 +0000

2013-10-30 09:52:30 +01:00

..

libs

oxenstored: Protect oxenstored from malicious domains.

2013-09-03 12:03:39 +01:00

xenstored

tools: xenstored: if the reply is too big then send E2BIG error

2013-10-30 09:52:30 +01:00

common.make

tools/ocaml: unify build process

2011-11-02 15:02:18 +00:00

LICENSE

tools/ocaml: add the missing license file that all OCaml libs refer to

2010-07-14 16:32:47 +01:00

Makefile

build: Make XEN_ROOT an absolute path.

2011-10-06 19:47:14 +01:00

Makefile.rules

ocaml: evtchn+xc bindings: use libxenctrl and libxenguest

2011-01-06 17:37:00 +00:00