| commit | 3c507c26ecda8f072c80338592d7894543448fe4 | |
| author | Jan Kiszka <jan.kiszka@siemens.com> | |
| Tue, 10 Mar 2020 17:42:11 +0000 (10 18:42 +0100) | ||
| committer | Paolo Bonzini <pbonzini@redhat.com> | |
| Mon, 16 Mar 2020 22:02:22 +0000 (16 23:02 +0100) | ||
| tree | 4438a2dc484e7f8a4ba6ebfefff353ed937d5583 | treesnapshot (tar.gz zip) |
| parent | 6c94b95274b7a602243f8ab5a9c3e54d4f5acc6b | commitdiff |
hw/i386/intel_iommu: Fix out-of-bounds access on guest IRT
vtd_irte_get failed to check the index against the configured table
size, causing an out-of-bounds access on guest memory and potentially
misinterpreting the result.
Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>
Message-Id: <4b15b728-bdfe-3bbe-3a5c-ca3baeef3c5c@siemens.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
vtd_irte_get failed to check the index against the configured table
size, causing an out-of-bounds access on guest memory and potentially
misinterpreting the result.
Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>
Message-Id: <4b15b728-bdfe-3bbe-3a5c-ca3baeef3c5c@siemens.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
| hw/i386/intel_iommu.c | diffblobblamehistory |