$NetBSD: patch-CVE-2015-7969,v 1.1 2015/10/29 21:59:16 bouyer Exp $ Patch for CVE-2015-7869 aka XSA-149 + XSA-151 based on http://xenbits.xenproject.org/xsa/xsa149.patch http://xenbits.xenproject.org/xsa/xsa151.patch --- xen/common/domain.c.orig 2014-09-02 08:22:57.000000000 +0200 +++ xen/common/domain.c 2015-10-29 22:29:21.000000000 +0100 @@ -685,6 +685,7 @@ xsm_free_security_domain(d); free_cpumask_var(d->domain_dirty_cpumask); + xfree(d->vcpu); free_domain_struct(d); send_global_virq(VIRQ_DOM_EXC); --- xen/common/xenoprof.c.orig 2014-09-02 08:22:57.000000000 +0200 +++ xen/common/xenoprof.c 2015-10-29 22:29:35.000000000 +0100 @@ -239,6 +239,7 @@ d->xenoprof->rawbuf = alloc_xenheap_pages(get_order_from_pages(npages), 0); if ( d->xenoprof->rawbuf == NULL ) { + xfree(d->xenoprof->vcpu); xfree(d->xenoprof); d->xenoprof = NULL; return -ENOMEM; @@ -286,6 +287,7 @@ free_xenheap_pages(x->rawbuf, order); } + xfree(x->vcpu); xfree(x); d->xenoprof = NULL; }