hw/i386/intel_iommu: Fix out-of-bounds access on guest IRT
commit3c507c26ecda8f072c80338592d7894543448fe4
authorJan Kiszka <jan.kiszka@siemens.com>
Tue, 10 Mar 2020 17:42:11 +0000 (10 18:42 +0100)
committerPaolo Bonzini <pbonzini@redhat.com>
Mon, 16 Mar 2020 22:02:22 +0000 (16 23:02 +0100)
tree4438a2dc484e7f8a4ba6ebfefff353ed937d5583
parent6c94b95274b7a602243f8ab5a9c3e54d4f5acc6b
hw/i386/intel_iommu: Fix out-of-bounds access on guest IRT

vtd_irte_get failed to check the index against the configured table
size, causing an out-of-bounds access on guest memory and potentially
misinterpreting the result.

Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>
Message-Id: <4b15b728-bdfe-3bbe-3a5c-ca3baeef3c5c@siemens.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
hw/i386/intel_iommu.c