]> asedeno.scripts.mit.edu Git - linux.git/commit
xen, cpu_hotplug: Prevent an out of bounds access
authorDan Carpenter <dan.carpenter@oracle.com>
Thu, 7 Mar 2019 05:41:22 +0000 (08:41 +0300)
committerJuergen Gross <jgross@suse.com>
Fri, 8 Mar 2019 16:58:14 +0000 (17:58 +0100)
commit201676095dda7e5b31a5e1d116d10fc22985075e
tree813e414ea824d48f18cf89c805fba00dd7831fb8
parentb1ddd406cd1e9bb51fa90d03ee562c832e38eb52
xen, cpu_hotplug: Prevent an out of bounds access

The "cpu" variable comes from the sscanf() so Smatch marks it as
untrusted data.  We can't pass a higher value than "nr_cpu_ids" to
cpu_possible() or it results in an out of bounds access.

Fixes: d68d82afd4c8 ("xen: implement CPU hotplugging")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Juergen Gross <jgross@suse.com>
Signed-off-by: Juergen Gross <jgross@suse.com>
drivers/xen/cpu_hotplug.c