mirror of
https://github.com/xen-project/xen.git
synced 2026-10-28 02:01:24 +01:00
Daniel P. Smith
5154fdda11
When DOMID_INVALID is passed, the dom exec handler lock is being taken without any check that the domain is even allowed to take the lock. This allows for an unauthorized domain to DoS the get_domain_state domctl op. Move to consider the op effectively being called against the hypervisor. Thus it is the target of the call being invoked to identify the last domain with a state change. The subsequent check of whether the source domain is allowed the state of the last domain to change state is still relevant. This is part of XSA-492. Signed-off-by: Daniel P. Smith <dpsmith@apertussolutions.com> Signed-off-by: Jan Beulich <jbeulich@suse.com> Reviewed-by: Roger Pau Monné <roger.pau@citrix.com>