diff options
| author | David Woodhouse <[email protected]> | 2009-09-19 07:36:28 -0700 |
|---|---|---|
| committer | David Woodhouse <[email protected]> | 2009-09-19 07:36:28 -0700 |
| commit | 59c36286b74ae6a8adebf6e133a83d7f2e3e6704 (patch) | |
| tree | ad6d608b560dc540330bdcc89e8702ac85993174 /lib/cpu-notifier-error-inject.c | |
| parent | 2ebe31513fcbe7a781f27002f065b50ae195022f (diff) | |
intel-iommu: Fix integer overflow in dma_pte_{clear_range,free_pagetable}()
If end_pfn is equal to (unsigned long)-1, then the loop will never end.
Seen on 32-bit kernel, but could have happened on 64-bit too once we get
hardware that supports 64-bit guest addresses.
Change both functions to a 'do {} while' loop with the test at the end,
and check for the PFN having wrapper round to zero.
Reported-by: Benjamin LaHaise <[email protected]>
Tested-by: Benjamin LaHaise <[email protected]>
Signed-off-by: David Woodhouse <[email protected]>
Diffstat (limited to 'lib/cpu-notifier-error-inject.c')
0 files changed, 0 insertions, 0 deletions