common/grant_table.c:cache_flush() grabs the rcu lock for the current
domain, but only releases it on error paths.

Note that this is not a security issue, as the preempt count is used
exclusively for assertions at the moment.

Signed-off-by: George Dunlap <[email protected]>
Reviewed-by: Jan Beulich <[email protected]>
---
CC: Ian Jackson <[email protected]>
CC: Wei Liu <[email protected]>
CC: Andrew Cooper <[email protected]>
CC: Jan Beulich <[email protected]>
CC: Tim Deegan <[email protected]>
CC: Stefano Stabellini <[email protected]>
CC: Konrad Wilk <[email protected]>
---
 xen/common/grant_table.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/xen/common/grant_table.c b/xen/common/grant_table.c
index 48c547930c..8346994de6 100644
--- a/xen/common/grant_table.c
+++ b/xen/common/grant_table.c
@@ -3273,6 +3273,7 @@ static int cache_flush(const gnttab_cache_flush_t 
*cflush, grant_ref_t *cur_ref)
 
     unmap_domain_page(v);
     put_page(page);
+    rcu_unlock_domain(d);
 
     return ret;
 }
-- 
2.15.1


_______________________________________________
Xen-devel mailing list
[email protected]
https://lists.xenproject.org/mailman/listinfo/xen-devel

Reply via email to