[xen master] tools/xenstored: fix live update with watches specifying depth

[patchbot@xxxxxxx]

commit 6b30eca0e388e5aaa4319c647a777d703d7ee752
Author:     Juergen Gross <jgross@xxxxxxxx>
AuthorDate: Fri Sep 18 12:25:07 2026 +0200
Commit:     Andrew Cooper <andrew.cooper3@xxxxxxxxxx>
CommitDate: Tue Oct 13 13:47:27 2026 +0100

    tools/xenstored: fix live update with watches specifying depth
    
    Due to a typo the state record for a watch specifying a depth is
    written only partially. Instead of using the correct length of the
    xs_state_watch_ext structure only the length of the xs_state_watch
    structure was used when writing the data.
    
    Fix that by using the correct length.
    
    This is XSA-514 / CVE-2026-79607
    
    Fixes: db98de120cb8 ("tools/xenstored: add depth information to watches")
    Reported-by: Andrii Sultanov <andriy.sultanov@xxxxxxxxxx>
    Signed-off-by: Juergen Gross <jgross@xxxxxxxx>
---
 tools/xenstored/watch.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tools/xenstored/watch.c b/tools/xenstored/watch.c
index c143e6fbcf..7097ab0b0d 100644
--- a/tools/xenstored/watch.c
+++ b/tools/xenstored/watch.c
@@ -354,7 +354,7 @@ const char *dump_state_watches(FILE *fp, struct connection 
*conn,
                        return "Dump watch state error";
 
                if (watch->depth >= 0) {
-                       if (fwrite(&swe, sizeof(sw), 1, fp) != 1)
+                       if (fwrite(&swe, sizeof(swe), 1, fp) != 1)
                                return "Dump watch state ext error";
                } else {
                        if (fwrite(&sw, sizeof(sw), 1, fp) != 1)
--
generated by git-patchbot for /home/xen/git/xen.git#master