Jason Andryuk 0bfe567b58 libxl: Use zero-ed memory for PVH acpi tables ...

xl/libxl memory is leaking into a PVH guest through uninitialized
portions of the ACPI tables.

Use libxl_zalloc() to obtain zero-ed memory to avoid this issue.

This is XSA-464 / CVE-2024-45819.

Signed-off-by: Jason Andryuk <jason.andryuk@amd.com>
Fixes: 14c0d328da ("libxl/acpi: Build ACPI tables for HVMlite guests")
Reviewed-by: Jan Beulich <jbeulich@suse.com>

2024-11-12 13:32:45 +01:00

..

9pfsd

9pfsd: fix release build with old gcc

2024-08-02 08:44:22 +02:00

console

tools/console: Add escape argument to configure escape character

2023-07-27 09:47:33 +02:00

debugger

tools: Use new xc function for some xc_domain_getinfo() calls

2023-05-10 19:59:27 +01:00

examples

tools/examples: Remove more obsolete content

2024-07-30 17:36:51 +01:00

firmware

mktarball: only archive Xen

2024-09-04 16:07:41 +02:00

flask

xen/xsm: Wire up get_dom0_console

2024-04-30 08:33:41 +02:00

fuzz

x86emul/test: rename "cp"

2024-09-04 16:06:21 +02:00

golang

tools/arm: Introduce the "nr_spis" xl config entry

2024-05-24 16:26:22 -07:00

helpers

Revert "xen/arm: Alloc XenStore page for Dom0less DomUs from hypervisor"

2024-06-19 12:48:47 +01:00

hotplug

hotplug: Restore block-tap phy compatibility (again)

2024-07-24 11:36:04 +02:00

include

x86: Introduce X86_ET_* constants in x86-defns.h

2024-10-04 12:13:32 +01:00

libacpi

LICENSES: Remove the use of deprecated SPDX tags

2023-05-09 10:37:29 +01:00

libfsimage

tools/libfsimage: Export a new function to preload all plugins

2023-10-11 06:36:50 +01:00

libs

libxl: Use zero-ed memory for PVH acpi tables

2024-11-12 13:32:45 +01:00

misc

mktarball: only archive Xen

2024-09-04 16:07:41 +02:00

ocaml

ocaml/libs: Fill build failure due to unused variable in ocaml macro

2024-10-18 10:56:41 +01:00

pygrub

tools/pygrub: Drop compatibility symlink

2023-12-20 19:15:30 +00:00

python

tools: don't expose XENFEAT_hvm_pirqs by default

2024-01-25 17:46:57 +00:00

tests

x86emul/test: drop an undue conditional

2024-11-07 12:51:04 +01:00

vchan

tools: Use new xc function for some xc_domain_getinfo() calls

2023-05-10 19:59:27 +01:00

xcutils

tools/lsevtchn: Use errno macro to handle hypercall error cases

2024-08-02 08:43:57 +02:00

xenmon

tools: Make some callers of xc_domain_getinfo() use xc_domain_getinfolist()

2023-04-28 14:34:40 +01:00

xenpaging

tools: Modify single-domid callers of xc_domain_getinfolist()

2023-05-10 19:59:27 +01:00

xenpmd

tools: Remove -Werror everywhere else

2022-10-14 16:17:41 +01:00

xenstored

tools/xenstored: remove unneeded libxenguest reference

2024-10-11 11:09:52 +01:00

xentop

tools/xentop: Fix cpu% sort order

2024-05-15 19:59:52 +01:00

xentrace

tools/xenalyze: Remove argp_program_bug_address

2024-06-26 14:19:29 +01:00

xl

xl: fix incorrect output in "help" command

2024-08-14 08:49:44 +02:00

xs-clients

tools/xs-clients: Fix make clean rule

2024-07-04 11:32:55 +01:00

config.h.in

build: Regenerate ./configure with Autoconf 2.71

2024-07-08 14:46:12 +01:00

configure

Re-run ./autogens.h for 4.20

2024-07-18 16:00:52 +01:00

configure.ac

build: Drop libiconv as a build dependecy

2024-07-09 18:10:52 +01:00

cross-install

cross-install: Only apply in tools directory, and automatically wrap $INSTALL.

2008-08-30 08:36:02 +01:00

Makefile

mktarball: only archive Xen

2024-09-04 16:07:41 +02:00

Rules.mk

build: move xenlibs-dependencies make definition to uselibs.mk

2024-10-08 11:15:08 +01:00