[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[PATCH 0/5] xeniface: fixes from static analysis


  • To: win-pv-devel@xxxxxxxxxxxxxxxxxxxx
  • From: Césaire Mounah <cesaire.mounah@xxxxxxxxxx>
  • Date: Tue, 20 Oct 2026 13:53:02 +0200
  • Authentication-results: eu.smtp.expurgate.cloud; dkim=pass header.s=selector1 header.d=vates.tech header.i="@vates.tech" header.h="From:Subject:Date:Message-ID:To:Cc:MIME-Version:Content-Type:Feedback-ID"
  • Cc: Césaire Mounah <cesaire.mounah@xxxxxxxxxx>
  • Delivery-date: Tue, 20 Oct 2026 11:53:17 +0000
  • Feedback-id: default:8631fc262581453bbf619ec5b2062170:Sweego
  • List-id: Developer list for the Windows PV Drivers subproject <win-pv-devel.lists.xenproject.org>

These patches fix issues found by running CodeQL (Microsoft
windows-drivers suites and cpp-security-extended) on xeniface.

Césaire Mounah (5):
  xenagent: Use new (std::nothrow) where the result is checked for NULL
  xenagent: Let CXenIfaceDevice release its own registrations
  xeniface: Reject unaligned addresses in
    GNTTAB_PERMIT_FOREIGN_ACCESS_V2
  xeniface: Size converted MAP_FOREIGN_PAGES input with the V2 header
  xeniface: Bound NumberPermissions before checking the input length

 src/xenagent/convdevice.cpp     |   3 +-
 src/xenagent/devicelist.cpp     |  11 +-
 src/xenagent/xenifacedevice.cpp | 177 +++++++++++++++++---------------
 src/xenagent/xenifacedevice.h   |  20 ++--
 src/xeniface/ioctl_gnttab.c     |   6 +-
 src/xeniface/ioctl_store.c      |   5 +
 6 files changed, 125 insertions(+), 97 deletions(-)

-- 
2.55.0.windows.5



--
Césaire Mounah | Vates Windows Guest Tools Engineer

XCP-ng & Xen Orchestra - Vates solutions

web: https://vates.tech

 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.