Yousef Alhouseen cbbef43bdc xenbus: reject unterminated directory replies ... split_strings() walks each directory entry with strlen(). Although the transport adds a terminator after the reply buffer, a malformed reply without a final NUL inside its advertised length would let that walk cross the protocol payload boundary. Reject such replies before counting the strings. Report the protocol violation once and return -EIO to the caller. Signed-off-by: Yousef Alhouseen <alhouseenyousef@gmail.com> Reviewed-by: Juergen Gross <jgross@suse.com> Signed-off-by: Juergen Gross <jgross@suse.com> Message-ID: <20260626223738.43742-1-alhouseenyousef@gmail.com>		2026-07-01 10:01:14 +02:00
..
events	treewide: Explicitly include the x86 CPUID headers	2026-05-06 14:29:59 +02:00
xen-pciback	PCI: use generic driver_override infrastructure	2026-04-04 00:44:30 +02:00
xenbus	xenbus: reject unterminated directory replies	2026-07-01 10:01:14 +02:00
xenfs	convert xenfs	2025-11-16 01:35:02 -05:00
acpi.c	ACPI: PCI: IRQ: Fix INTx GSIs signedness	2026-01-05 19:06:40 +01:00
arm-device.c	Convert 'alloc_obj' family to use the new default GFP_KERNEL argument	2026-02-21 17:09:51 -08:00
balloon.c	Convert 'alloc_obj' family to use the new default GFP_KERNEL argument	2026-02-21 17:09:51 -08:00
biomerge.c
cpu_hotplug.c
dbgp.c
efi.c
evtchn.c	Convert 'alloc_obj' family to use the new default GFP_KERNEL argument	2026-02-21 17:09:51 -08:00
features.c
gntalloc.c	xen/gntalloc: validate grant count before allocation	2026-07-01 09:58:24 +02:00
gntdev-common.h	xen/gntdev: remove struct gntdev_copy_batch from stack	2025-07-14 17:10:09 +02:00
gntdev-dmabuf.c	Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses	2026-02-22 08:26:33 -08:00
gntdev-dmabuf.h	drivers/xen/gntdev: use xen_pv_domain() instead of cached value	2025-09-08 17:01:36 +02:00
gntdev.c	xen/gntdev: fix error handling in ioctl	2026-07-01 09:51:09 +02:00
grant-dma-iommu.c	Get rid of 'remove_new' relic from platform driver struct	2024-12-01 15:12:43 -08:00
grant-dma-ops.c	of: Factor arguments passed to of_map_id() into a struct	2026-06-12 10:25:39 -05:00
grant-table.c	treewide: Explicitly include the x86 CPUID headers	2026-05-06 14:29:59 +02:00
Kconfig	mm: rename vm_ops->find_special_page() to vm_ops->find_normal_page()	2025-09-13 16:54:53 -07:00
Makefile
manage.c	xen/manage: unwind partial shutdown watcher setup on error	2026-04-10 11:04:02 +02:00
mcelog.c	xen/mcelog: mark g_physinfo, ncpus and xen_mce_chrdev_device as __ro_after_init	2026-06-08 09:01:02 +02:00
mem-reservation.c
pci.c	Convert 'alloc_obj' family to use the new default GFP_KERNEL argument	2026-02-21 17:09:51 -08:00
pcpu.c	Convert 'alloc_obj' family to use the new default GFP_KERNEL argument	2026-02-21 17:09:51 -08:00
platform-pci.c	xen/platform-pci: Simplify initialization of pci_device_id array	2026-06-08 08:57:25 +02:00
privcmd-buf.c	Convert 'alloc_flex' family to use the new default GFP_KERNEL argument	2026-02-21 17:09:51 -08:00
privcmd.c	xen/privcmd: fix double free via VMA splitting	2026-04-23 15:32:59 +02:00
privcmd.h
pvcalls-back.c	Convert 'alloc_obj' family to use the new default GFP_KERNEL argument	2026-02-21 17:09:51 -08:00
pvcalls-front.c	xen/pvcalls: bound backend response req_id before indexing rsp[]	2026-07-01 09:31:02 +02:00
pvcalls-front.h	xen: update pvcalls_front_accept prototype	2025-01-22 16:32:08 +01:00
swiotlb-xen.c	dma-mapping updates for Linux 7.0:	2026-04-17 11:12:42 -07:00
sys-hypervisor.c	Buffer overflow in drivers/xen/sys-hypervisor.c	2026-04-23 15:32:51 +02:00
time.c	treewide: Replace kmalloc with kmalloc_obj for non-scalar types	2026-02-21 01:02:28 -08:00
unpopulated-alloc.c	Convert 'alloc_obj' family to use the new default GFP_KERNEL argument	2026-02-21 17:09:51 -08:00
xen-acpi-pad.c	ACPI: PAD: xen: Check ACPI_COMPANION() against NULL	2026-05-12 19:01:37 +02:00
xen-acpi-processor.c	xen: branch for v7.0-rc3	2026-03-07 07:44:32 -08:00
xen-balloon.c	xen: balloon: Replace sprintf() with sysfs_emit()	2026-06-08 09:01:49 +02:00
xen-front-pgdir-shbuf.c	xen/front-pgdir-shbuf: free grant reference head on errors	2026-07-01 09:51:41 +02:00
xen-scsiback.c	scsi: target: Use driver completion preference by default	2026-02-28 21:04:02 -05:00
xlate_mmu.c	Convert 'alloc_obj' family to use the new default GFP_KERNEL argument	2026-02-21 17:09:51 -08:00