Ian Jackson d88ac91ef2 tools: xenstored: if the reply is too big then send E2BIG error ...

This fixes the issue for both C and ocaml xenstored, however only the ocaml
xenstored is vulnerable in its default configuration.

Adding a new error appears to be safe, since bit libxenstore and the Linux
driver at least treat an unknown error code as EINVAL.

This is XSA-72 / CVE-2013-4416.

Original ocaml patch by Jerome Maloberti <jerome.maloberti@citrix.com>
Signed-off-by: Ian Campbell <ian.campbell@citrix.com>
Signed-off-by: Thomas Sanders <thomas.sanders@citrix.com>
(cherry picked from commit 8b2c441a1b)

2013-10-29 16:02:14 +00:00

..

libs

tools/ocaml: fix erroneous free of cpumap in stub_xc_vcpu_getaffinity

2013-10-10 16:06:17 +01:00

xenstored

tools: xenstored: if the reply is too big then send E2BIG error

2013-10-29 16:02:14 +00:00

common.make

tools: update ocamlfind handling

2013-02-05 11:31:11 +00:00

LICENSE

tools/ocaml: add the missing license file that all OCaml libs refer to

2010-07-14 16:32:47 +01:00

Makefile

build: Make XEN_ROOT an absolute path.

2011-03-17 10:36:25 +00:00

Makefile.rules

tools/ocaml: clean META files

2013-04-17 14:23:00 +01:00