| commit | 973e7170dddefb491a48df5cba33b2ae151013a0 | |
| author | Prasad J Pandit <pjp@fedoraproject.org> | |
| Mon, 19 Sep 2016 18:25:45 +0000 (19 23:55 +0530) | ||
| committer | Michael S. Tsirkin <mst@redhat.com> | |
| Fri, 23 Sep 2016 15:51:40 +0000 (23 18:51 +0300) | ||
| tree | e442e4cf4fb0110660249c5638f9ad960a31787a | treesnapshot (tar.gz zip) |
| parent | 9294d76c15e5d0cabc626bc4d95f95f896abc8d0 | commitdiff |
virtio: add check for descriptor's mapped address
virtio back end uses set of buffers to facilitate I/O operations.
If its size is too large, 'cpu_physical_memory_map' could return
a null address. This would result in a null dereference while
un-mapping descriptors. Add check to avoid it.
Reported-by: Qinghao Tang <luodalongde@gmail.com>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Reviewed-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Reviewed-by: Laszlo Ersek <lersek@redhat.com>
virtio back end uses set of buffers to facilitate I/O operations.
If its size is too large, 'cpu_physical_memory_map' could return
a null address. This would result in a null dereference while
un-mapping descriptors. Add check to avoid it.
Reported-by: Qinghao Tang <luodalongde@gmail.com>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Reviewed-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Reviewed-by: Laszlo Ersek <lersek@redhat.com>
| hw/virtio/virtio.c | diffblobblamehistory |