Jason Wang b82df42059 vhost: reject zero size iova range ...

[ Upstream commit 813dbeb656 ]

We used to accept zero size iova range which will lead a infinite loop
in translate_desc(). Fixing this by failing the request in this case.

Reported-by: syzbot+d21e6e297322a900c128@syzkaller.appspotmail.com
Fixes: 6b1e6cc7 ("vhost: new device IOTLB API")
Signed-off-by: Jason Wang <jasowang@redhat.com>
Acked-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2019-04-27 09:36:31 +02:00

..

Kconfig

vhost: allow vhost-scsi driver to be built-in

2018-08-22 01:01:32 +03:00

Kconfig.vringh

vhost: split out vringh Kconfig

2016-08-02 16:54:28 +03:00

Makefile

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

net.c

vhost: fix OOB in get_rx_bufs()

2019-02-06 17:30:08 +01:00

scsi.c

vhost: fix OOB in get_rx_bufs()

2019-02-06 17:30:08 +01:00

test.c

treewide: kmalloc() -> kmalloc_array()

2018-06-12 16:19:22 -07:00

test.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

vhost.c

vhost: reject zero size iova range

2019-04-27 09:36:31 +02:00

vhost.h

vhost: fix OOB in get_rx_bufs()

2019-02-06 17:30:08 +01:00

vringh.c

treewide: kmalloc() -> kmalloc_array()

2018-06-12 16:19:22 -07:00

vsock.c

vhost/vsock: fix vhost vsock cid hashing inconsistent

2019-03-19 13:12:42 +01:00