Files
xen/tools
Ian Jackson d88ac91ef2 tools: xenstored: if the reply is too big then send E2BIG error
This fixes the issue for both C and ocaml xenstored, however only the ocaml
xenstored is vulnerable in its default configuration.

Adding a new error appears to be safe, since bit libxenstore and the Linux
driver at least treat an unknown error code as EINVAL.

This is XSA-72 / CVE-2013-4416.

Original ocaml patch by Jerome Maloberti <jerome.maloberti@citrix.com>
Signed-off-by: Ian Campbell <ian.campbell@citrix.com>
Signed-off-by: Thomas Sanders <thomas.sanders@citrix.com>
(cherry picked from commit 8b2c441a1b)
2013-10-29 16:02:14 +00:00
..
2013-09-09 11:51:20 +02:00
2013-04-11 11:09:25 +01:00
2013-06-14 16:39:36 +01:00
2013-05-08 12:14:32 +01:00
2013-05-21 10:16:30 +02:00