[Bug 1538049] [NEW] xenstore crashes with SIGBUS in domain_can_read()

[Stefan Bader]

Public bug reported:

Problem got introduced by xen-4.6 in Xenial. Older versions are
unaffected.

Testcase:
 - Start one additional domU (PV or HVM does not matter)
 - Repeatedly execute "xenstore-ls"

Eventually the xenstore-ls call locks up while xenstored crashes when it
tries to access memory in

tools/xenstore/xenstored_domain.c:255 domain_can_read(struct connection
*conn)

Debugging shows that conn->domain->interface at the time of crash
returns a completely different address than before (there should only be
one per running domain, so 2).

** Affects: xen (Ubuntu)
     Importance: Critical
     Assignee: Stefan Bader (smb)
         Status: In Progress

** Affects: xen (Ubuntu Xenial)
     Importance: Critical
     Assignee: Stefan Bader (smb)
         Status: In Progress

** Also affects: xen (Ubuntu Xenial)
   Importance: Critical
     Assignee: Stefan Bader (smb)
       Status: In Progress

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to xen in Ubuntu.
https://bugs.launchpad.net/bugs/1538049

Title:
  xenstore crashes with SIGBUS in domain_can_read()

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1538049/+subscriptions