diff options
| author | Raphael Norwitz <raphael.norwitz@nutanix.com> | 2022-01-17 04:12:31 +0000 |
|---|---|---|
| committer | Michael S. Tsirkin <mst@redhat.com> | 2022-02-04 09:07:43 -0500 |
| commit | 9f4e63491ba7ae2f7a537bb98a337f4dcd4e1c54 (patch) | |
| tree | e9f7b8ddf06104b833ef08e1bbd80b5e8bc1caca /migration/page_cache.c | |
| parent | 316ee11144e3b8e1bc97a1d0fc6b1caf1963e104 (diff) | |
| download | qemu-9f4e63491ba7ae2f7a537bb98a337f4dcd4e1c54.zip qemu-9f4e63491ba7ae2f7a537bb98a337f4dcd4e1c54.tar.gz qemu-9f4e63491ba7ae2f7a537bb98a337f4dcd4e1c54.tar.bz2 | |
libvhost-user: Add vu_add_mem_reg input validation
Today if multiple FDs are sent from the VMM to the backend in a
VHOST_USER_ADD_MEM_REG message, one FD will be mapped and the remaining
FDs will be leaked. Therefore if multiple FDs are sent we report an
error and fail the operation, closing all FDs in the message.
Likewise in case the VMM sends a message with a size less than that
of a memory region descriptor, we add a check to gracefully report an
error and fail the operation rather than crashing.
Signed-off-by: Raphael Norwitz <raphael.norwitz@nutanix.com>
Message-Id: <20220117041050.19718-3-raphael.norwitz@nutanix.com>
Reviewed-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Reviewed-by: David Hildenbrand <david@redhat.com>
Diffstat (limited to 'migration/page_cache.c')
0 files changed, 0 insertions, 0 deletions