Re: [PATCH v6 4/8] tools/xenstored: Check NULL domain in domain_chk_quota()

2025-08-18 Thread Jürgen Groß
On 15.08.25 23:35, Jason Andryuk wrote: With separate control and xenstore domains, the xenstore domain itself is no longer privileged. Local socket connections do not have conn->domain assigned, but domain_chk_quota() will go ahead and dereference it. The !domid_is_unprivileged(conn->id) check

[PATCH v6 4/8] tools/xenstored: Check NULL domain in domain_chk_quota()

2025-08-15 Thread Jason Andryuk
With separate control and xenstore domains, the xenstore domain itself is no longer privileged. Local socket connections do not have conn->domain assigned, but domain_chk_quota() will go ahead and dereference it. The !domid_is_unprivileged(conn->id) check usually means the function would have alr