XSA-231

Advisory: XSA-231

Before XSA-231, the node parameter in xen_memory_reservation was passed unaudited into the heap allocator, which ASSERT()ed it was range, then proceeded to write into an array bounded by MAX_NUMANODES.

This test loops over all node values in the mem_flags field, and pokes Xen with each value. If Xen is vulnerable, it will most likely crash.

See also

tests/xsa-231/main.c