Marcel Apfelbaum 32e5703cfe pvrdma: Ensure correct input on ring init (CVE-2021-3607) ...

Check the guest passed a non zero page count
for pvrdma device ring buffers.

Fixes: CVE-2021-3607
Reported-by: VictorV (Kunlun Lab) <vv474172261@gmail.com>
Reviewed-by: VictorV (Kunlun Lab) <vv474172261@gmail.com>
Signed-off-by: Marcel Apfelbaum <marcel@redhat.com>
Message-Id: <20210630114634.2168872-1-marcel@redhat.com>
Reviewed-by: Yuval Shaia <yuval.shaia.ml@gmail.com>
Tested-by: Yuval Shaia <yuval.shaia.ml@gmail.com>
Signed-off-by: Marcel Apfelbaum <marcel.apfelbaum@gmail.com>

2021-07-04 22:47:51 +03:00

..

vmw

pvrdma: Ensure correct input on ring init (CVE-2021-3607)

2021-07-04 22:47:51 +03:00

Kconfig

kconfig: add dependencies on CONFIG_MSI_NONBROKEN

2019-03-18 09:39:57 +01:00

meson.build

meson: convert hw/rdma

2020-08-21 06:30:29 -04:00

rdma_backend_defs.h

hw/rdma: Replace QList by GQueue

2020-12-19 10:38:43 +01:00

rdma_backend.c

hw/rdma: Replace QList by GQueue

2020-12-19 10:38:43 +01:00

rdma_backend.h

hw/rdma: Skip data-path mr_id translation

2020-03-21 19:16:38 +02:00

rdma_rm_defs.h

hw/rdma: Modify create/destroy QP to support SRQ

2019-05-04 15:55:56 +03:00

rdma_rm.c

qemu/atomic.h: rename atomic_ to qatomic_

2020-09-23 16:07:44 +01:00

rdma_rm.h

hw/rdma: Modify create/destroy QP to support SRQ

2019-05-04 15:55:56 +03:00

rdma_utils.c

hw/rdma: Replace QList by GQueue

2020-12-19 10:38:43 +01:00

rdma_utils.h

hw/rdma: Replace QList by GQueue

2020-12-19 10:38:43 +01:00

rdma.c

{hmp, hw/pvrdma}: Expose device internals via monitor interface

2019-03-16 15:52:44 +02:00

trace-events

docs: fix references to docs/devel/tracing.rst

2021-06-02 06:51:09 +02:00

trace.h

trace: switch position of headers to what Meson requires

2020-08-21 06:18:24 -04:00