Previously, we matched do_..._op, but there exist sub calls of a different structure. Therefore, add some of them here as well. Signed-off-by: Norbert Manthey <nmanthey@xxxxxxxxx> --- check_user_data2.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/check_user_data2.c b/check_user_data2.c index d95ba1d..a04deb2 100644 --- a/check_user_data2.c +++ b/check_user_data2.c @@ -1238,6 +1238,9 @@ void check_user_data2(int id) for (i = 0; i < ARRAY_SIZE(xen_from_guest_funcs); i++) add_function_hook(xen_from_guest_funcs[i], &match_user_copy, INT_PTR(0)); + // some extra functions where we know tainted data is passed + add_function_hook("hvm_vcpu_op", &match_user_copy, INT_PTR(1)); + // the Xen equivalent to kvm_register_read add_function_assign_hook("acpi_hw_register_read", &match_user_copy, NULL); -- 2.7.4 Amazon Development Center Germany GmbH Berlin - Dresden - Aachen main office: Krausenstr. 38, 10117 Berlin Geschaeftsfuehrer: Dr. Ralf Herbrich, Christian Schlaeger Ust-ID: DE289237879 Eingetragen am Amtsgericht Charlottenburg HRB 149173 B