Jan Beulich 545607eb3c x86: fix various issues with handling guest IRQs ...

- properly revoke IRQ access in map_domain_pirq() error path
- don't permit replacing an in use IRQ
- don't accept inputs in the GSI range for MAP_PIRQ_TYPE_MSI
- track IRQ access permission in host IRQ terms, not guest IRQ ones
  (and with that, also disallow Dom0 access to IRQ0)

This is CVE-2013-1919 / XSA-46.

Signed-off-by: Jan Beulich <jbeulich@suse.com>
Acked-by: Stefano Stabellini <stefano.stabellini@eu.citrix.com>

2013-04-18 16:11:23 +02:00

..

blktap

blktap: fix rpmlint warning spurious-executable-perm

2012-10-18 09:35:04 +01:00

blktap2

blktap2: use sys/eventfd.h if it is available

2013-04-11 11:09:25 +01:00

console

xenconsoled: use array index to keep track of pollfd

2013-03-25 13:00:01 +00:00

debugger

tools: Fix memset(&p,0,sizeof(p)) idiom in several places.

2013-02-13 17:00:15 +00:00

examples

xl: Implement XENMEM_claim_pages support via 'claim_mode' global config

2013-04-16 16:21:50 +01:00

firmware

tools/firmware: Fix ovmf build with gcc version different from 4.4

2013-03-25 12:37:03 +00:00

flask

xen: allow for explicitly specifying node-affinity

2013-04-17 12:11:14 +01:00

hotplug

hotplug/Linux: Remove hardcoded paths

2013-04-11 13:19:57 +01:00

include

tools: foreign: ensure 64 bit values are properly aligned for arm

2013-02-26 12:20:56 +00:00

libaio

tools, build: Fix libaio Makefile to put files in $(DESTDIR)

2012-03-13 16:26:20 +00:00

libfsimage

libfsimage: add ext4 support for CentOS 5.x

2012-09-14 10:02:47 +01:00

libvchan

nstore: rename public xenstore headers

2012-05-14 17:15:36 +01:00

libxc

libxc: allow for explicitly specifying node-affinity

2013-04-17 12:11:14 +01:00

libxen

tools: Remove old vtpm stuff from tools/libxen

2012-11-19 12:59:50 +00:00

libxl

x86: fix various issues with handling guest IRQs

2013-04-18 16:11:23 +02:00

memshr

tools: memshr: arm64 support

2013-04-11 11:09:25 +01:00

misc

gcov: Add small utility to deal with test coverage information from Xen

2013-02-21 16:28:11 +00:00

ocaml

tools/ocaml: clean META files

2013-04-17 14:23:00 +01:00

pygrub

Fix pygrub handling non-default entry

2013-01-17 13:53:07 +00:00

python

x86: fix various issues with handling guest IRQs

2013-04-18 16:11:23 +02:00

remus

remus: command line switch to enable/disable checkpoint compression

2011-12-01 15:36:51 +00:00

sv

tools: Always use sane upstream (`native') python paths

2009-04-08 19:13:04 +01:00

tests

xen, libxc: rename xenctl_cpumap to xenctl_bitmap

2013-04-17 12:11:14 +01:00

xcutils

tools/xc: log pid in xc_save/xc_restore output

2013-02-15 13:32:13 +00:00

xenbackendd

libxl: call hotplug scripts from xl for NetBSD

2012-08-01 12:46:47 +01:00

xenballoon

xenballoond.init: remove 4 from default runlevel

2012-10-08 12:18:31 +01:00

xenmon

tools/build: Introduce {PREPEND,APPEND}_{LIB,INCLUDES}

2011-11-14 18:14:07 +00:00

xenpaging

Fix emacs local variable block to use correct C style variable.

2013-02-21 16:12:46 +00:00

xenpmd

nstore: rename public xenstore headers

2012-05-14 17:15:36 +01:00

xenstat

tools: Fix memset(&p,0,sizeof(p)) idiom in several places.

2013-02-13 17:00:15 +00:00

xenstore

Switch to poll() in cxenstored's IO loop

2013-04-11 15:42:44 +01:00

xentrace

trace: Add reason for NMI exit TRAP

2013-03-25 16:57:31 +01:00

xm-test

tools: Remove the vtpm process model

2012-11-13 10:47:00 +00:00

config.h.in

blktap2: use sys/eventfd.h if it is available

2013-04-11 11:09:25 +01:00

configure

configure: test(1) uses = not == for string comparison

2013-04-17 14:29:17 +01:00

configure.ac

tools+stubdom: install under /usr/local by default.

2013-04-12 10:20:25 +01:00

cross-install

cross-install: Only apply in tools directory, and automatically wrap $INSTALL.

2008-08-30 08:36:02 +01:00

Makefile

tools: only build blktap1 on x86

2013-04-11 11:09:25 +01:00

Rules.mk

tools: Use AC_SYS_LARGEFILE instead of calling getconf(1)

2013-04-11 11:09:25 +01:00