[Xen-changelog] [xen stable-4.9] tools/libxl: Fix a segment fault when mmio_hole is set in hvm.cfg

[patchbot@xxxxxxx]

commit f4f02f121f271ee0722723e393226687b42e29a1
Author:     Xiong Zhang <xiong.y.zhang@xxxxxxxxx>
AuthorDate: Thu Jul 13 10:03:39 2017 +0800
Commit:     Wei Liu <wei.liu2@xxxxxxxxxx>
CommitDate: Fri Aug 4 16:57:45 2017 +0100

    tools/libxl: Fix a segment fault when mmio_hole is set in hvm.cfg
    
    When valid mmio_hole is set in hvm.cfg, segment fault happens at accessing
    localents pointer.
    
    Because the size of localents pointer isn't enough to store appended
    mmio_hole_size parameter.
    
    Signed-off-by: Xiong Zhang <xiong.y.zhang@xxxxxxxxx>
    Acked-by: Wei Liu <wei.liu2@xxxxxxxxxx>
    (cherry picked from commit 614a14736e33fb84872eb00f08799ebbc73a96c6)
---
 tools/libxl/libxl_create.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tools/libxl/libxl_create.c b/tools/libxl/libxl_create.c
index bffbc45..1158303 100644
--- a/tools/libxl/libxl_create.c
+++ b/tools/libxl/libxl_create.c
@@ -451,7 +451,7 @@ int libxl__domain_build(libxl__gc *gc,
         vments[4] = "start_time";
         vments[5] = GCSPRINTF("%lu.%02d", 
start_time.tv_sec,(int)start_time.tv_usec/10000);
 
-        localents = libxl__calloc(gc, 9, sizeof(char *));
+        localents = libxl__calloc(gc, 11, sizeof(char *));
         i = 0;
         localents[i++] = "platform/acpi";
         localents[i++] = libxl__acpi_defbool_val(info) ? "1" : "0";
--
generated by git-patchbot for /home/xen/git/xen.git#stable-4.9

_______________________________________________
Xen-changelog mailing list
Xen-changelog@xxxxxxxxxxxxx
https://lists.xenproject.org/xen-changelog