Xie Yongji 1af7ccbd92 vhost-vdpa: Fix integer overflow in vhost_vdpa_process_iotlb_update() ... [ Upstream commit 0e398290cf ] The "msg->iova + msg->size" addition can have an integer overflow if the iotlb message is from a malicious user space application. So let's fix it. Fixes: 1b48dc03e5 ("vhost: vdpa: report iova range") Reported-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Xie Yongji <xieyongji@bytedance.com> Acked-by: Jason Wang <jasowang@redhat.com> Link: https://lore.kernel.org/r/20210728130756.97-1-xieyongji@bytedance.com Signed-off-by: Michael S. Tsirkin <mst@redhat.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2021-08-26 08:35:42 -04:00
..
iotlb.c	vhost: Fix documentation	2020-09-24 05:54:36 -04:00
Kconfig	vhost_vdpa: implement IRQ offloading in vhost_vdpa	2020-08-05 11:08:42 -04:00
Makefile	vhost: introduce vDPA-based backend	2020-04-02 10:41:40 -04:00
net.c	vhost_net: fix ubuf refcount incorrectly when sendmsg fails	2021-01-12 20:18:13 +01:00
scsi.c	vhost scsi: fix error return code in vhost_scsi_set_endpoint()	2020-12-30 11:54:00 +01:00
test.c	tools/virtio: Add --reset	2020-06-22 12:34:21 -04:00
test.h	tools/virtio: Add --reset	2020-06-22 12:34:21 -04:00
vdpa.c	vhost-vdpa: Fix integer overflow in vhost_vdpa_process_iotlb_update()	2021-08-26 08:35:42 -04:00
vhost.c	vhost: Fix vhost_vq_reset()	2021-04-07 15:00:05 +02:00
vhost.h	vhost: add helper to check if a vq has been setup	2020-11-15 17:30:54 -05:00
vringh.c	vringh: fix vringh_iov_push_*() documentation	2020-11-25 04:22:48 -05:00
vsock.c	vhost: allow device that does not depend on vhost worker	2020-06-04 15:36:51 -04:00