summaryrefslogtreecommitdiff
path: root/drivers/xen
diff options
context:
space:
mode:
authorDaniel De Graaf <dgdegra@tycho.nsa.gov>2011-11-28 20:49:09 +0400
committerKonrad Rzeszutek Wilk <konrad.wilk@oracle.com>2011-12-16 20:25:54 +0400
commitc3b3f16d1bceb5ac5f21528f889810b4ac5a3596 (patch)
tree1447aa5bd9e3ff8e682dde597485cbfc857e054f /drivers/xen
parent9438ce9dbbf512fd717051284f568d5cb35e5cf1 (diff)
downloadlinux-c3b3f16d1bceb5ac5f21528f889810b4ac5a3596.tar.xz
xen/events: prevent calling evtchn_get on invalid channels
The event channel number provided to evtchn_get can be provided by userspace, so needs to be checked against the maximum number of event channels prior to using it to index into evtchn_to_irq. Signed-off-by: Daniel De Graaf <dgdegra@tycho.nsa.gov> Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
Diffstat (limited to 'drivers/xen')
-rw-r--r--drivers/xen/events.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/drivers/xen/events.c b/drivers/xen/events.c
index a3bcd6175f4a..e5e5812a1014 100644
--- a/drivers/xen/events.c
+++ b/drivers/xen/events.c
@@ -1104,6 +1104,9 @@ int evtchn_get(unsigned int evtchn)
struct irq_info *info;
int err = -ENOENT;
+ if (evtchn >= NR_EVENT_CHANNELS)
+ return -EINVAL;
+
mutex_lock(&irq_mapping_update_lock);
irq = evtchn_to_irq[evtchn];