mirror of
https://git.freebsd.org/ports.git
synced 2025-07-16 16:59:17 -04:00
41bd009722
Security: XSA-117 / CVE-2015-0268 Security: XSA-118 / CVE-2015-1563 Security: XSA-121 / CVE-2015-2044 Security: XSA-122 / CVE-2015-2045 Security: XSA-123 / CVE-2015-2151 Security: XSA-125 / CVE-2015-2752 Security: XSA-127 / CVE-2015-2751 Security: XSA-132 / CVE-2015-3340 Security: XSA-134 / CVE-2015-4163 Security: XSA-136 / CVE-2015-4164
19 lines
650 B
Diff
19 lines
650 B
Diff
From: Andrew Cooper <andrew.cooper3@citrix.com>
|
|
Subject: x86/traps: loop in the correct direction in compat_iret()
|
|
|
|
This is XSA-136.
|
|
|
|
Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
|
|
Reviewed-by: Jan Beulich <jbeulich@suse.com>
|
|
|
|
--- a/xen/arch/x86/x86_64/compat/traps.c
|
|
+++ b/xen/arch/x86/x86_64/compat/traps.c
|
|
@@ -119,7 +119,7 @@ unsigned int compat_iret(void)
|
|
}
|
|
else if ( ksp > regs->_esp )
|
|
{
|
|
- for (i = 9; i > 0; ++i)
|
|
+ for ( i = 9; i > 0; --i )
|
|
{
|
|
rc |= __get_user(x, (u32 *)regs->rsp + i);
|
|
rc |= __put_user(x, (u32 *)(unsigned long)ksp + i);
|