Re: [Xen-devel] [PATCH] xen, cpu_hotplug: Prevent an out of bounds access

2019-03-08 Thread Juergen Gross
On 07/03/2019 06:41, Dan Carpenter wrote: > The "cpu" variable comes from the sscanf() so Smatch marks it as > untrusted data. We can't pass a higher value than "nr_cpu_ids" to > cpu_possible() or it results in an out of bounds access. > > Fixes: d68d82afd4c8 ("xen: implement CPU hotplugging") >

Re: [Xen-devel] [PATCH] xen, cpu_hotplug: Prevent an out of bounds access

2019-03-06 Thread Juergen Gross
On 07/03/2019 06:41, Dan Carpenter wrote: > The "cpu" variable comes from the sscanf() so Smatch marks it as > untrusted data. We can't pass a higher value than "nr_cpu_ids" to > cpu_possible() or it results in an out of bounds access. > > Fixes: d68d82afd4c8 ("xen: implement CPU hotplugging") >

[Xen-devel] [PATCH] xen, cpu_hotplug: Prevent an out of bounds access

2019-03-06 Thread Dan Carpenter
The "cpu" variable comes from the sscanf() so Smatch marks it as untrusted data. We can't pass a higher value than "nr_cpu_ids" to cpu_possible() or it results in an out of bounds access. Fixes: d68d82afd4c8 ("xen: implement CPU hotplugging") Signed-off-by: Dan Carpenter --- drivers/xen/cpu_hot