Juergen Gross 6b30eca0e3 tools/xenstored: fix live update with watches specifying depth ...

Due to a typo the state record for a watch specifying a depth is
written only partially. Instead of using the correct length of the
xs_state_watch_ext structure only the length of the xs_state_watch
structure was used when writing the data.

Fix that by using the correct length.

This is XSA-514 / CVE-2026-79607

Fixes: db98de120c ("tools/xenstored: add depth information to watches")
Reported-by: Andrii Sultanov <andriy.sultanov@vates.tech>
Signed-off-by: Juergen Gross <jgross@suse.com>

2026-10-13 13:47:27 +01:00

..

9pfsd

tools: add a dedicated header file for barrier definitions

2024-12-19 10:04:45 +01:00

console

tools/console/daemon: fix log_dir memory leak in xenconsoled

2026-10-12 17:31:39 +02:00

debugger

tools: Use new xc function for some xc_domain_getinfo() calls

2023-05-10 19:59:27 +01:00

examples

tools/examples: Remove more obsolete content

2024-07-30 17:36:51 +01:00

firmware

hvmloader: add new SMBIOS tables (7, 8, 9, 26, 27, 28)

2025-08-27 11:26:33 +02:00

flask

sysctl/Flask: add preliminary check for XEN_SYSCTL_getdomaininfolist

2026-07-28 12:40:10 +01:00

fuzz

x86emul/fuzz: sanitize CR4 values

2026-08-26 14:14:03 +02:00

golang

tools/libxl: Add support for Viridian stimer direct mode

2026-10-12 17:31:39 +02:00

helpers

libxc: drop size parameter from xc_flask_context_to_sid()

2026-07-06 09:41:45 +02:00

hotplug

tools/hotplug/Linux: Add bridge VLAN support

2026-10-12 17:31:39 +02:00

include

tools/libxl: Add support for Viridian stimer direct mode

2026-10-12 17:31:39 +02:00

libacpi

libacpi: drop mk_dsdt's -d / --debug option

2026-09-07 14:11:35 +02:00

libfsimage

libfsimage/iso9660: harden Rock Ridge SUSP parsing against malformed lengths

2026-07-28 12:40:10 +01:00

libs

tools/libxenstat: don't lose all VIFs when dom0 has no Linux bridge

2026-10-12 17:31:39 +02:00

misc

x86/vRTC: support century field

2026-09-02 15:14:08 +02:00

ocaml

oxenstored: Reset the watches trie on domain reconnect

2026-09-08 12:57:23 +01:00

pygrub

tools: Fix regex syntax warnings with Python 3.12

2024-12-18 13:18:19 +00:00

python

libxc: drop size parameter from xc_flask_context_to_sid()

2026-07-06 09:41:45 +02:00

tests

xen/pdx: fix offset-compression merge of a contained range

2026-10-12 09:41:55 +02:00

vchan

tools: Use new xc function for some xc_domain_getinfo() calls

2023-05-10 19:59:27 +01:00

xcutils

tools/lsevtchn: Use errno macro to handle hypercall error cases

2024-08-02 08:43:57 +02:00

xenmon

tools: Make some callers of xc_domain_getinfo() use xc_domain_getinfolist()

2023-04-28 14:34:40 +01:00

xenpaging

tools: Modify single-domid callers of xc_domain_getinfolist()

2023-05-10 19:59:27 +01:00

xenpmd

tools: Remove -Werror everywhere else

2022-10-14 16:17:41 +01:00

xenstored

tools/xenstored: fix live update with watches specifying depth

2026-10-13 13:47:27 +01:00

xentop

tools/xentop: reject invalid --delay and --iterations arguments

2026-10-12 17:31:39 +02:00

xentrace

tools/xentrace: decode RTDS priority in repl_budget records

2026-07-23 10:20:08 +02:00

xl

tools: expose admission control toggle via xl sched-rtds

2026-10-12 17:20:27 +02:00

xs-clients

tools/xs-clients: support depth with xenstore-watch

2026-04-22 08:59:03 +02:00

config.h.in

tools/configure: Introduce deps on json-c lib for libxl

2025-10-06 12:28:43 +01:00

configure

Rerun ./autogen.sh for 4.23

2026-06-29 18:06:24 +01:00

configure.ac

tools/configure: Detect the presence of liblz4

2026-06-08 14:06:40 +01:00

cross-install

cross-install: Only apply in tools directory, and automatically wrap $INSTALL.

2008-08-30 08:36:02 +01:00

Makefile

tools: remove qemu-traditional

2025-06-02 10:31:21 +02:00

Rules.mk

tools: replace @xxx@ markers at build time

2025-11-21 15:51:49 +00:00