kernel_optimize_test/drivers/xen
Dan Carpenter 21643e69a4 xen-gntalloc: integer overflow in gntalloc_ioctl_alloc()
On 32 bit systems a high value of op.count could lead to an integer
overflow in the kzalloc() and gref_ids would be smaller than
expected.  If the you triggered another integer overflow in
"if (gref_size + op.count > limit)" then you'd probably get memory
corruption inside add_grefs().

CC: stable@kernel.org
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
2011-11-16 12:13:47 -05:00
..
xen-pciback xen: Add module.h to modular drivers/xen users. 2011-10-31 19:32:11 -04:00
xenbus xen: map foreign pages for shared rings by updating the PTEs directly 2011-11-16 12:13:08 -05:00
xenfs
balloon.c xen/balloon: Avoid OOM when requesting highmem 2011-11-16 12:13:43 -05:00
biomerge.c
cpu_hotplug.c
events.c Merge branch 'stable/cleanups-3.2' of git://git.kernel.org/pub/scm/linux/kernel/git/konrad/xen 2011-11-06 20:13:34 -08:00
evtchn.c
features.c
gntalloc.c xen-gntalloc: integer overflow in gntalloc_ioctl_alloc() 2011-11-16 12:13:47 -05:00
gntdev.c xen-gntdev: integer overflow in gntdev_alloc_map() 2011-11-16 12:13:46 -05:00
grant-table.c Merge branch 'stable/cleanups-3.2' of git://git.kernel.org/pub/scm/linux/kernel/git/konrad/xen 2011-11-06 20:13:34 -08:00
Kconfig xen: remove XEN_PLATFORM_PCI config option 2011-09-29 10:52:16 -04:00
Makefile xen: remove XEN_PLATFORM_PCI config option 2011-09-29 10:52:16 -04:00
manage.c xen: Add export.h for THIS_MODULE/EXPORT_SYMBOL to various xen users. 2011-10-31 19:32:11 -04:00
pci.c Merge branch 'stable/cleanups-3.2' of git://git.kernel.org/pub/scm/linux/kernel/git/konrad/xen 2011-11-06 20:13:34 -08:00
platform-pci.c
swiotlb-xen.c xen: Add export.h for THIS_MODULE/EXPORT_SYMBOL to various xen users. 2011-10-31 19:32:11 -04:00
sys-hypervisor.c
tmem.c xen: prepare tmem shim to handle frontswap 2011-06-17 15:06:20 -06:00
xen-balloon.c xen: use static initializers in xen-balloon.c 2011-07-29 13:45:45 -04:00
xen-selfballoon.c Merge branches 'stable/bug.fixes-3.2' and 'stable/mmu.fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/konrad/xen 2011-10-25 09:17:47 +02:00
xencomm.c