Jason Andryuk 267796fd04 libxl: Use zero-ed memory for PVH acpi tables ...

xl/libxl memory is leaking into a PVH guest through uninitialized
portions of the ACPI tables.

Use libxl_zalloc() to obtain zero-ed memory to avoid this issue.

This is XSA-464 / CVE-2024-45819.

Signed-off-by: Jason Andryuk <jason.andryuk@amd.com>
Fixes: 14c0d328da ("libxl/acpi: Build ACPI tables for HVMlite guests")
Reviewed-by: Jan Beulich <jbeulich@suse.com>
master commit: 0bfe567b58
master date: 2024-11-12 13:32:45 +0100

2024-11-12 13:41:13 +01:00

..

9pfsd

9pfsd: fix release build with old gcc

2024-08-08 13:47:44 +02:00

console

tools/console: Add escape argument to configure escape character

2023-07-27 09:47:33 +02:00

debugger

tools: Use new xc function for some xc_domain_getinfo() calls

2023-05-10 19:59:27 +01:00

examples

tools/examples: cleanup Makefile

2022-07-11 12:13:24 +02:00

firmware

tools/hvmloader: Further simplify SMP setup

2024-05-15 19:59:52 +01:00

flask

xen/xsm: Wire up get_dom0_console

2024-04-30 08:33:41 +02:00

fuzz

x86emul: rework wrapping of libc functions in test and fuzzing harnesses

2023-08-18 15:04:28 +02:00

golang

tools/arm: Introduce the "nr_spis" xl config entry

2024-05-24 16:26:22 -07:00

helpers

Revert "xen/arm: Alloc XenStore page for Dom0less DomUs from hypervisor"

2024-06-19 12:48:47 +01:00

hotplug

hotplug: Restore block-tap phy compatibility (again)

2024-07-24 11:53:04 +02:00

include

build/mkheader: Fix Syntax/DeprecationWarnings

2024-07-04 11:43:33 +01:00

libacpi

LICENSES: Remove the use of deprecated SPDX tags

2023-05-09 10:37:29 +01:00

libfsimage

tools/libfsimage: Export a new function to preload all plugins

2023-10-11 06:36:50 +01:00

libs

libxl: Use zero-ed memory for PVH acpi tables

2024-11-12 13:41:13 +01:00

misc

tools/xen-cpuid: Drop old names

2024-05-20 17:01:20 +01:00

ocaml

xen: enable altp2m at create domain domctl

2024-05-29 16:10:04 +02:00

pygrub

tools/pygrub: Drop compatibility symlink

2023-12-20 19:15:30 +00:00

python

tools: don't expose XENFEAT_hvm_pirqs by default

2024-01-25 17:46:57 +00:00

tests

x86emul/test: fix build with gas 2.43

2024-09-24 14:42:39 +02:00

vchan

tools: Use new xc function for some xc_domain_getinfo() calls

2023-05-10 19:59:27 +01:00

xcutils

tools/lsevtchn: Use errno macro to handle hypercall error cases

2024-08-08 13:47:30 +02:00

xenmon

tools: Make some callers of xc_domain_getinfo() use xc_domain_getinfolist()

2023-04-28 14:34:40 +01:00

xenpaging

tools: Modify single-domid callers of xc_domain_getinfolist()

2023-05-10 19:59:27 +01:00

xenpmd

tools: Remove -Werror everywhere else

2022-10-14 16:17:41 +01:00

xenstored

tools/{c,o}xenstored: Don't link against libsystemd

2024-05-23 15:04:40 +01:00

xentop

tools/xentop: Fix cpu% sort order

2024-05-15 19:59:52 +01:00

xentrace

tools/xenalyze: Remove argp_program_bug_address

2024-06-26 14:19:29 +01:00

xl

xl: fix incorrect output in "help" command

2024-09-24 14:29:26 +02:00

xs-clients

tools/xs-clients: Fix make clean rule

2024-07-04 11:32:55 +01:00

config.h.in

build: Regenerate ./configure with Autoconf 2.71

2024-07-08 14:46:12 +01:00

configure

build: Drop libiconv as a build dependecy

2024-07-09 18:10:52 +01:00

configure.ac

build: Drop libiconv as a build dependecy

2024-07-09 18:10:52 +01:00

cross-install

cross-install: Only apply in tools directory, and automatically wrap $INSTALL.

2008-08-30 08:36:02 +01:00

Makefile

tools: add a new xen 9pfs daemon

2024-02-15 16:24:39 +00:00

Rules.mk

Turn off debug by default

2024-07-18 15:28:17 +01:00