xen/blkfront: don't take local copy of a request from the ring page
authorJuergen Gross <jgross@suse.com>
Fri, 30 Jul 2021 10:38:53 +0000 (12:38 +0200)
committerJuergen Gross <jgross@suse.com>
Mon, 30 Aug 2021 10:01:55 +0000 (12:01 +0200)
commit8f5a695d99000fc3aa73934d7ced33cfc64dcdab
tree846af3a474a28c6c69c9035129f221363ba5efbc
parent71b66243f9898d0e54296b4e7035fb33cdcb0707
xen/blkfront: don't take local copy of a request from the ring page

In order to avoid a malicious backend being able to influence the local
copy of a request build the request locally first and then copy it to
the ring page instead of doing it the other way round as today.

Signed-off-by: Juergen Gross <jgross@suse.com>
Reviewed-by: Jan Beulich <jbeulich@suse.com>
Acked-by: Roger Pau Monné <roger.pau@citrix.com>
Link: https://lore.kernel.org/r/20210730103854.12681-3-jgross@suse.com
Signed-off-by: Juergen Gross <jgross@suse.com>
drivers/block/xen-blkfront.c