Juergen Gross 1672ef1a5f tools/xenstored: fix live update with watches specifying depth ...

Due to a typo the state record for a watch specifying a depth is
written only partially. Instead of using the correct length of the
xs_state_watch_ext structure only the length of the xs_state_watch
structure was used when writing the data.

Fix that by using the correct length.

This is XSA-514 / CVE-2026-79607

Fixes: db98de120c ("tools/xenstored: add depth information to watches")
Reported-by: Andrii Sultanov <andriy.sultanov@vates.tech>
Signed-off-by: Juergen Gross <jgross@suse.com>
(cherry picked from commit 6b30eca0e3)

2026-10-13 13:48:17 +01:00

..

9pfsd

tools: add a dedicated header file for barrier definitions

2024-12-19 10:04:45 +01:00

console

tools/macros: adjust ROUNDUP() interface to match hypervisor

2026-06-05 17:40:21 +02:00

debugger

tools: Use new xc function for some xc_domain_getinfo() calls

2023-05-10 19:59:27 +01:00

examples

tools/examples: Remove more obsolete content

2024-07-30 17:36:51 +01:00

firmware

hvmloader: add new SMBIOS tables (7, 8, 9, 26, 27, 28)

2025-08-27 11:26:33 +02:00

flask

sysctl/Flask: add preliminary check for XEN_SYSCTL_getdomaininfolist

2026-07-28 13:06:53 +01:00

fuzz

x86/cpu-policy: move CPU policy library code

2026-02-25 12:31:08 +01:00

golang

tools/libxl: add support for xenstore quota in domain_config

2026-03-27 12:06:37 +01:00

helpers

tools: Fix fallout from DOMID_ANY ABI breakage

2026-05-28 16:19:16 +01:00

hotplug

tools: remove setup_physical_bridge_port() function

2026-05-05 08:26:41 +02:00

include

xen/vpci: allow unaligned accesses by the hardware domain

2026-09-10 12:31:05 +02:00

libacpi

libacpi: drop mk_dsdt's -d / --debug option

2026-09-10 12:32:40 +02:00

libfsimage

libfsimage/iso9660: harden Rock Ridge SUSP parsing against malformed lengths

2026-07-28 13:06:53 +01:00

libs

xen/arm: split DTB/initrd placement helpers

2026-06-09 16:08:16 +01:00

misc

tools/macros: adjust ROUNDUP() interface to match hypervisor

2026-06-05 17:40:21 +02:00

ocaml

oxenstored: Reset the watches trie on domain reconnect

2026-08-26 17:48:17 +01:00

pygrub

tools: Fix regex syntax warnings with Python 3.12

2024-12-18 13:18:19 +00:00

python

tools: Fix fallout from DOMID_ANY ABI breakage

2026-05-28 16:19:16 +01:00

tests

x86emul: V{,P}{COMPRESS,EXPAND}* can (wrongly) trigger assertion

2026-08-24 11:46:53 +02:00

vchan

tools: Use new xc function for some xc_domain_getinfo() calls

2023-05-10 19:59:27 +01:00

xcutils

tools/lsevtchn: Use errno macro to handle hypercall error cases

2024-08-02 08:43:57 +02:00

xenmon

tools: Make some callers of xc_domain_getinfo() use xc_domain_getinfolist()

2023-04-28 14:34:40 +01:00

xenpaging

tools: Modify single-domid callers of xc_domain_getinfolist()

2023-05-10 19:59:27 +01:00

xenpmd

tools: Remove -Werror everywhere else

2022-10-14 16:17:41 +01:00

xenstored

tools/xenstored: fix live update with watches specifying depth

2026-10-13 13:48:17 +01:00

xentop

tools/xentop: Add physical CPU statistics support

2025-09-04 14:30:53 +02:00

xentrace

tools/xenalyze: Fix -Werror=nonnull failure

2026-06-15 18:04:20 +01:00

xl

xl/parse: mark as GNU source

2026-05-18 08:59:40 +02:00

xs-clients

tools/xs-clients: support depth with xenstore-watch

2026-04-22 08:59:03 +02:00

config.h.in

tools/configure: Introduce deps on json-c lib for libxl

2025-10-06 12:28:43 +01:00

configure

tools/configure: Detect the presence of liblz4

2026-06-08 14:06:40 +01:00

configure.ac

tools/configure: Detect the presence of liblz4

2026-06-08 14:06:40 +01:00

cross-install

cross-install: Only apply in tools directory, and automatically wrap $INSTALL.

2008-08-30 08:36:02 +01:00

Makefile

tools: remove qemu-traditional

2025-06-02 10:31:21 +02:00

Rules.mk

Switch to release builds by default

2026-06-29 18:19:45 +01:00