Dan Carpenter 2cd5e08b9a xen, cpu_hotplug: Prevent an out of bounds access ...

[ Upstream commit 201676095dda7e5b31a5e1d116d10fc22985075e ]

The "cpu" variable comes from the sscanf() so Smatch marks it as
untrusted data.  We can't pass a higher value than "nr_cpu_ids" to
cpu_possible() or it results in an out of bounds access.

Fixes: d68d82afd4c8 ("xen: implement CPU hotplugging")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Juergen Gross <jgross@suse.com>
Signed-off-by: Juergen Gross <jgross@suse.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2020-01-27 14:46:25 +01:00

..

events

xen/events: fix binding user event channels to cpus

2019-07-31 07:28:39 +02:00

xen-pciback

xen/pciback: Check dev_data before using it

2019-12-05 15:37:27 +01:00

xenbus

xen/xenbus: fix self-deadlock after killing user process

2019-10-11 18:18:36 +02:00

xenfs

…

acpi.c

…

arm-device.c

…

balloon.c

xen/balloon: fix ballooned page accounting without hotplug enabled

2020-01-09 10:17:53 +01:00

biomerge.c

…

cpu_hotplug.c

xen, cpu_hotplug: Prevent an out of bounds access

2020-01-27 14:46:25 +01:00

dbgp.c

…

efi.c

…

evtchn.c

xen/events: fix binding user event channels to cpus

2019-07-31 07:28:39 +02:00

fallback.c

…

features.c

…

gntalloc.c

…

gntdev.c

…

grant-table.c

…

Kconfig

…

Makefile

…

manage.c

…

mcelog.c

…

pci.c

xen/pci: reserve MCFG areas earlier

2019-10-11 18:18:38 +02:00

pcpu.c

…

platform-pci.c

…

preempt.c

…

privcmd.c

…

privcmd.h

…

pvcalls-back.c

…

swiotlb-xen.c

xen/swiotlb: fix condition for calling xen_destroy_contiguous_region()

2019-08-06 19:05:27 +02:00

sys-hypervisor.c

…

time.c

…

tmem.c

…

xen-acpi-cpuhotplug.c

…

xen-acpi-memhotplug.c

…

xen-acpi-pad.c

…

xen-acpi-processor.c

…

xen-balloon.c

…

xen-scsiback.c

…

xen-selfballoon.c

…

xen-stub.c

…

xlate_mmu.c

…