| commit | e61da14d60ba1cceacad8396adcb9662c7f690af | |
| author | Amit Shah <amit.shah@redhat.com> | |
| Tue, 27 Apr 2010 12:34:07 +0000 (27 18:04 +0530) | ||
| committer | Anthony Liguori <aliguori@us.ibm.com> | |
| Wed, 28 Apr 2010 13:58:22 +0000 (28 08:58 -0500) | ||
| tree | 9cbdcc118f7b67712da19faa5fb13e3bff24067b | treesnapshot (tar.gz zip) |
| parent | fa6111f215736e44f0ac4fc50947e6c407588c28 | commitdiff |
virtio-serial: Handle scatter-gather buffers for control messages
Current control messages are small enough to not be split into multiple
buffers but we could run into such a situation in the future or a
malicious guest could cause such a situation.
So handle the entire iov request for control messages.
Also ensure the size of the control request is >= what we expect
otherwise we risk accessing memory that we don't own.
Signed-off-by: Amit Shah <amit.shah@redhat.com>
CC: Avi Kivity <avi@redhat.com>
Reported-by: Avi Kivity <avi@redhat.com>
Signed-off-by: Anthony Liguori <aliguori@us.ibm.com>
Current control messages are small enough to not be split into multiple
buffers but we could run into such a situation in the future or a
malicious guest could cause such a situation.
So handle the entire iov request for control messages.
Also ensure the size of the control request is >= what we expect
otherwise we risk accessing memory that we don't own.
Signed-off-by: Amit Shah <amit.shah@redhat.com>
CC: Avi Kivity <avi@redhat.com>
Reported-by: Avi Kivity <avi@redhat.com>
Signed-off-by: Anthony Liguori <aliguori@us.ibm.com>
| hw/virtio-serial-bus.c | diffblobblamehistory |