Re: [Xen-devel] [PATCH 18/23] libxc: Add range checking to xc_dom_binloader

[Ian Jackson <Ian.Jackson@xxxxxxxxxxxxx>]

George Dunlap writes ("Re: [Xen-devel] [PATCH 18/23] libxc: Add range checking 
to xc_dom_binloader"):
> if ( dom->kernel-size - sizeof(*table) > 8192)
>   ptr_end = dom->kernel_blob + 8192
> else
>   ptr_end = dom->kernel_size - sizeof(*table);
> 
> Or something along those lines?

Yes, I said something similar to Chuck.  Except that your code has a
bug if kernel_size < sizeof(*table) :-).

TBH I think I'd rather not disturb this any more than necessary.

Ian.

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
http://lists.xen.org/xen-devel