提交 a846738f 编写于 作者: J Jan Beulich 提交者: Juergen Gross

xen-blkback: don't leak persistent grants from xen_blkbk_map()

The fix for XSA-365 zapped too many of the ->persistent_gnt[] entries.
Ones successfully obtained should not be overwritten, but instead left
for xen_blkbk_unmap_prepare() to pick up and put.

This is XSA-371.
Signed-off-by: NJan Beulich <jbeulich@suse.com>
Cc: stable@vger.kernel.org
Reviewed-by: NJuergen Gross <jgross@suse.com>
Reviewed-by: NWei Liu <wl@xen.org>
Signed-off-by: NJuergen Gross <jgross@suse.com>
上级 af44a387
...@@ -891,7 +891,7 @@ static int xen_blkbk_map(struct xen_blkif_ring *ring, ...@@ -891,7 +891,7 @@ static int xen_blkbk_map(struct xen_blkif_ring *ring,
out: out:
for (i = last_map; i < num; i++) { for (i = last_map; i < num; i++) {
/* Don't zap current batch's valid persistent grants. */ /* Don't zap current batch's valid persistent grants. */
if(i >= last_map + segs_to_map) if(i >= map_until)
pages[i]->persistent_gnt = NULL; pages[i]->persistent_gnt = NULL;
pages[i]->handle = BLKBACK_INVALID_HANDLE; pages[i]->handle = BLKBACK_INVALID_HANDLE;
} }
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册