Re: [PATCH] tools/xenstore: fix get_spec_node()

2023-07-20 Thread Juergen Gross
On 21.07.23 00:45, Julien Grall wrote: Hi Juergen, On 20/07/2023 16:08, Juergen Gross wrote: In case get_spec_node() is being called for a special node starting with '@' it won't set *canonical_name. This can result in a crash of xenstored due to dereferencing the uninitialized name in fire_wat

Re: [PATCH] tools/xenstore: fix get_spec_node()

2023-07-20 Thread Julien Grall
Hi Juergen, On 20/07/2023 16:08, Juergen Gross wrote: In case get_spec_node() is being called for a special node starting with '@' it won't set *canonical_name. This can result in a crash of xenstored due to dereferencing the uninitialized name in fire_watches(). This is no security issue as it

[PATCH] tools/xenstore: fix get_spec_node()

2023-07-20 Thread Juergen Gross
In case get_spec_node() is being called for a special node starting with '@' it won't set *canonical_name. This can result in a crash of xenstored due to dereferencing the uninitialized name in fire_watches(). This is no security issue as it requires either a privileged caller or ownership of the