Andrew Cooper 42db2deb5e tools/libxs: Fix length check in xs_talkv() ...

If the sum of iov element lengths overflows, the XENSTORE_PAYLOAD_MAX can
pass, after which we'll write 4G of data with a good-looking length field, and
the remainder of the payload will be interpreted as subsequent commands.

Check each iov element length for XENSTORE_PAYLOAD_MAX before accmulating it.

Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
Reviewed-by: Jason Andryuk <jason.andryuk@amd.com>
Reviewed-by: Juergen Gross <jgross@suse.com>

2024-07-23 15:11:27 +01:00

..

9pfsd

tools/9pfsd: Fix build error caused by strerror_r

2024-03-07 14:24:42 +00:00

console

tools/console: Add escape argument to configure escape character

2023-07-27 09:47:33 +02:00

debugger

tools: Use new xc function for some xc_domain_getinfo() calls

2023-05-10 19:59:27 +01:00

examples

tools/examples: cleanup Makefile

2022-07-11 12:13:24 +02:00

firmware

tools/hvmloader: Further simplify SMP setup

2024-05-15 19:59:52 +01:00

flask

xen/xsm: Wire up get_dom0_console

2024-04-30 08:33:41 +02:00

fuzz

Add tools/fuzz/oss-fuzz/build.sh

2024-07-23 13:58:54 +02:00

golang

tools/arm: Introduce the "nr_spis" xl config entry

2024-05-24 16:26:22 -07:00

helpers

Revert "xen/arm: Alloc XenStore page for Dom0less DomUs from hypervisor"

2024-06-19 12:48:47 +01:00

hotplug

hotplug: Restore block-tap phy compatibility

2024-06-20 12:08:42 +02:00

include

build/mkheader: Fix Syntax/DeprecationWarnings

2024-07-04 11:43:33 +01:00

libacpi

LICENSES: Remove the use of deprecated SPDX tags

2023-05-09 10:37:29 +01:00

libfsimage

tools/libfsimage: Export a new function to preload all plugins

2023-10-11 06:36:50 +01:00

libs

tools/libxs: Fix length check in xs_talkv()

2024-07-23 15:11:27 +01:00

misc

tools/misc: xen-hvmcrash: Inject #DF instead of overwriting RIP

2024-07-22 10:50:03 +01:00

ocaml

xen: enable altp2m at create domain domctl

2024-05-29 16:10:04 +02:00

pygrub

tools/pygrub: Drop compatibility symlink

2023-12-20 19:15:30 +00:00

python

tools: don't expose XENFEAT_hvm_pirqs by default

2024-01-25 17:46:57 +00:00

tests

Add libfuzzer target to fuzz/x86_instruction_emulator

2024-07-23 13:58:07 +02:00

vchan

tools: Use new xc function for some xc_domain_getinfo() calls

2023-05-10 19:59:27 +01:00

xcutils

tools: Remove -Werror everywhere else

2022-10-14 16:17:41 +01:00

xenmon

tools: Make some callers of xc_domain_getinfo() use xc_domain_getinfolist()

2023-04-28 14:34:40 +01:00

xenpaging

tools: Modify single-domid callers of xc_domain_getinfolist()

2023-05-10 19:59:27 +01:00

xenpmd

tools: Remove -Werror everywhere else

2022-10-14 16:17:41 +01:00

xenstored

tools/{c,o}xenstored: Don't link against libsystemd

2024-05-23 15:04:40 +01:00

xentop

tools/xentop: Fix cpu% sort order

2024-05-15 19:59:52 +01:00

xentrace

tools/xenalyze: Remove argp_program_bug_address

2024-06-26 14:19:29 +01:00

xl

tools/xl: Open xldevd.log with O_CLOEXEC

2024-06-24 16:22:59 +01:00

xs-clients

tools/xs-clients: Fix make clean rule

2024-07-04 11:32:55 +01:00

config.h.in

build: Regenerate ./configure with Autoconf 2.71

2024-07-08 14:46:12 +01:00

configure

Re-run ./autogens.h for 4.20

2024-07-18 16:00:52 +01:00

configure.ac

build: Drop libiconv as a build dependecy

2024-07-09 18:10:52 +01:00

cross-install

cross-install: Only apply in tools directory, and automatically wrap $INSTALL.

2008-08-30 08:36:02 +01:00

Makefile

tools: add a new xen 9pfs daemon

2024-02-15 16:24:39 +00:00

Rules.mk

tools: Use -s for python shebangs

2023-03-17 10:44:16 +00:00