Hi,
Apologies for the late answer, I missed the e-mail in my inbox.
On 10/27/2017 05:37 PM, Ian Jackson wrote:
Pawel Wieczorkiewicz writes ("[PATCH] tools/xenstored: Check number of strings
passed to do_control()"):
It is possible to send a zero-string message body to xenstore's
XS_CONTROL
Pawel Wieczorkiewicz writes ("[PATCH] tools/xenstored: Check number of strings
passed to do_control()"):
> It is possible to send a zero-string message body to xenstore's
> XS_CONTROL handling function. Then the number of strings is used
> for an array allocation. This leads to a crash in
