Re: [PATCH] drivers/xen: avoid out-of-range write in xen_add_device

2013-01-07 Thread Jan Beulich
>>> On 07.01.13 at 16:08, Konrad Rzeszutek Wilk wrote: > On Sat, Jan 05, 2013 at 02:18:46PM -0500, Nickolai Zeldovich wrote: >> xen_add_device() in drivers/xen/pci.c allocates a struct >> physdev_pci_device_add on the stack and then writes to optarr[0]. >> The previous declaration of struct physde

Re: [PATCH] drivers/xen: avoid out-of-range write in xen_add_device

2013-01-07 Thread Konrad Rzeszutek Wilk
On Sat, Jan 05, 2013 at 02:18:46PM -0500, Nickolai Zeldovich wrote: > xen_add_device() in drivers/xen/pci.c allocates a struct > physdev_pci_device_add on the stack and then writes to optarr[0]. > The previous declaration of struct physdev_pci_device_add contained > a zero-length optarr[] array, pr