head	1.2;
access;
symbols
	pkgsrc-2016Q4:1.1.0.50
	pkgsrc-2016Q4-base:1.1
	pkgsrc-2016Q3:1.1.0.48
	pkgsrc-2016Q3-base:1.1
	pkgsrc-2016Q2:1.1.0.46
	pkgsrc-2016Q2-base:1.1
	pkgsrc-2016Q1:1.1.0.44
	pkgsrc-2016Q1-base:1.1
	pkgsrc-2015Q4:1.1.0.42
	pkgsrc-2015Q4-base:1.1
	pkgsrc-2015Q3:1.1.0.40
	pkgsrc-2015Q3-base:1.1
	pkgsrc-2015Q2:1.1.0.38
	pkgsrc-2015Q2-base:1.1
	pkgsrc-2015Q1:1.1.0.36
	pkgsrc-2015Q1-base:1.1
	pkgsrc-2014Q4:1.1.0.34
	pkgsrc-2014Q4-base:1.1
	pkgsrc-2014Q3:1.1.0.32
	pkgsrc-2014Q3-base:1.1
	pkgsrc-2014Q2:1.1.0.30
	pkgsrc-2014Q2-base:1.1
	pkgsrc-2014Q1:1.1.0.28
	pkgsrc-2014Q1-base:1.1
	pkgsrc-2013Q4:1.1.0.26
	pkgsrc-2013Q4-base:1.1
	pkgsrc-2013Q3:1.1.0.24
	pkgsrc-2013Q3-base:1.1
	pkgsrc-2013Q2:1.1.0.22
	pkgsrc-2013Q2-base:1.1
	pkgsrc-2013Q1:1.1.0.20
	pkgsrc-2013Q1-base:1.1
	pkgsrc-2012Q4:1.1.0.18
	pkgsrc-2012Q4-base:1.1
	pkgsrc-2012Q3:1.1.0.16
	pkgsrc-2012Q3-base:1.1
	pkgsrc-2012Q2:1.1.0.14
	pkgsrc-2012Q2-base:1.1
	pkgsrc-2012Q1:1.1.0.12
	pkgsrc-2012Q1-base:1.1
	pkgsrc-2011Q4:1.1.0.10
	pkgsrc-2011Q4-base:1.1
	pkgsrc-2011Q3:1.1.0.8
	pkgsrc-2011Q3-base:1.1
	pkgsrc-2011Q2:1.1.0.6
	pkgsrc-2011Q2-base:1.1
	pkgsrc-2011Q1:1.1.0.4
	pkgsrc-2011Q1-base:1.1
	pkgsrc-2010Q4:1.1.0.2;
locks; strict;
comment	@# @;


1.2
date	2016.12.29.19.13.01;	author wiz;	state dead;
branches;
next	1.1;
commitid	kFYPk8EnajcmFUzz;

1.1
date	2011.03.24.12.04.57;	author drochner;	state Exp;
branches
	1.1.2.1;
next	;

1.1.2.1
date	2011.03.24.12.04.57;	author tron;	state dead;
branches;
next	1.1.2.2;

1.1.2.2
date	2011.03.30.19.10.59;	author tron;	state Exp;
branches;
next	;


desc
@@


1.2
log
@Remove xenkernel and tools versions 3, 33, and 41.

As discussed on pkgsrc-users.
@
text
@$NetBSD: patch-ac,v 1.1 2011/03/24 12:04:57 drochner Exp $

CVE-2011-1166

--- xen/arch/x86/domain.c.orig	2009-08-06 12:56:41.000000000 +0000
+++ xen/arch/x86/domain.c
@@@@ -680,6 +680,11 @@@@ int arch_set_info_guest(
 
             v->arch.guest_table_user = pagetable_from_pfn(cr3_pfn);
         }
+        else if ( !(flags & VGCF_in_kernel) )
+        {
+            destroy_gdt(v);
+            return -EINVAL;
+        }
 #endif
     }
 #ifdef CONFIG_COMPAT
@


1.1
log
@add patch from upstream (manually, due to changed #ifdefs and indentation)
to fix possible crashes triggered by 64-bit guests (found by
Cherry G. Mathew, CVE-2011-1166)
bump PKGREV
@
text
@d1 1
a1 1
$NetBSD$
@


1.1.2.1
log
@file patch-ac was added on branch pkgsrc-2010Q4 on 2011-03-30 19:10:59 +0000
@
text
@d1 18
@


1.1.2.2
log
@Pullup ticket #3397 - requested by drochner
sysutils/xenkernel3: security patch
sysutils/xenkernel33: security patch

Revisions pulled up:
- sysutils/xenkernel3/Makefile                                  1.20
- sysutils/xenkernel3/distinfo                                  1.13
- sysutils/xenkernel3/patches/patch-ac                          1.3
- sysutils/xenkernel33/Makefile                                 1.13
- sysutils/xenkernel33/distinfo                                 1.11
- sysutils/xenkernel33/patches/patch-ac                         1.1

---
   Module Name:    pkgsrc
   Committed By:   drochner
   Date:           Thu Mar 24 12:04:57 UTC 2011

   Modified Files:
           pkgsrc/sysutils/xenkernel33: Makefile distinfo
   Added Files:
           pkgsrc/sysutils/xenkernel33/patches: patch-ac

   Log Message:
   add patch from upstream (manually, due to changed #ifdefs and indentation)
   to fix possible crashes triggered by 64-bit guests (found by
   Cherry G. Mathew, CVE-2011-1166)
   bump PKGREV

---
   Module Name:    pkgsrc
   Committed By:   drochner
   Date:           Thu Mar 24 12:43:53 UTC 2011

   Modified Files:
           pkgsrc/sysutils/xenkernel3: Makefile distinfo
   Added Files:
           pkgsrc/sysutils/xenkernel3/patches: patch-ac

   Log Message:
   add patch from upstream (manually, due to changed #ifdefs and indentation)
   to fix possible crashes triggered by 64-bit guests (found by
   Cherry G. Mathew, CVE-2011-1166)
   bump PKGREV
@
text
@a0 18
$NetBSD$

CVE-2011-1166

--- xen/arch/x86/domain.c.orig	2009-08-06 12:56:41.000000000 +0000
+++ xen/arch/x86/domain.c
@@@@ -680,6 +680,11 @@@@ int arch_set_info_guest(
 
             v->arch.guest_table_user = pagetable_from_pfn(cr3_pfn);
         }
+        else if ( !(flags & VGCF_in_kernel) )
+        {
+            destroy_gdt(v);
+            return -EINVAL;
+        }
 #endif
     }
 #ifdef CONFIG_COMPAT
@