tree 51baed1118c843c8037c9cd9fdeaab48e563a733
parent 496e5d5772661e5e4c7c2f5943b7bc0bb0bdea59
author Juergen Gross <jgross@suse.com> 1638187871 +0100
committer Greg Kroah-Hartman <gregkh@linuxfoundation.org> 1638949504 +0100

xen/blkfront: don't take local copy of a request from the ring page

commit 8f5a695d99000fc3aa73934d7ced33cfc64dcdab upstream.

In order to avoid a malicious backend being able to influence the local
copy of a request build the request locally first and then copy it to
the ring page instead of doing it the other way round as today.

Signed-off-by: Juergen Gross <jgross@suse.com>
Reviewed-by: Jan Beulich <jbeulich@suse.com>
Acked-by: Roger Pau Monné <roger.pau@citrix.com>
Link: https://lore.kernel.org/r/20210730103854.12681-3-jgross@suse.com
Signed-off-by: Juergen Gross <jgross@suse.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>