diff options
| author | Matt Delco <[email protected]> | 2019-09-16 14:16:54 -0700 |
|---|---|---|
| committer | Paolo Bonzini <[email protected]> | 2019-09-18 15:56:55 +0200 |
| commit | b60fe990c6b07ef6d4df67bc0530c7c90a62623a (patch) | |
| tree | 49d837232351e9b86c9632ccc509f26596e269ed /scripts/gcc-plugins/cyc_complexity_plugin.c | |
| parent | a9c20bb0206ae9384bd470a6832dd8913730add9 (diff) | |
KVM: coalesced_mmio: add bounds checking
The first/last indexes are typically shared with a user app.
The app can change the 'last' index that the kernel uses
to store the next result. This change sanity checks the index
before using it for writing to a potentially arbitrary address.
This fixes CVE-2019-14821.
Cc: [email protected]
Fixes: 5f94c1741bdc ("KVM: Add coalesced MMIO support (common part)")
Signed-off-by: Matt Delco <[email protected]>
Signed-off-by: Jim Mattson <[email protected]>
Reported-by: [email protected]
[Use READ_ONCE. - Paolo]
Signed-off-by: Paolo Bonzini <[email protected]>
Diffstat (limited to 'scripts/gcc-plugins/cyc_complexity_plugin.c')
0 files changed, 0 insertions, 0 deletions