aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorWilliam Henderson <william.henderson@nutanix.com>2023-08-18 13:24:49 +0000
committerJohn Levon <john.levon@nutanix.com>2023-09-15 12:59:39 +0100
commit8fa69649eb3de2c4ccd6185fb1ae80d3f88247a8 (patch)
tree26a79ca9f7174990fe8150eeb5099eeac2323f01
parent7f2e0e9ca01b42b4d6f323490213ca58bb955d50 (diff)
downloadlibvfio-user-8fa69649eb3de2c4ccd6185fb1ae80d3f88247a8.zip
libvfio-user-8fa69649eb3de2c4ccd6185fb1ae80d3f88247a8.tar.gz
libvfio-user-8fa69649eb3de2c4ccd6185fb1ae80d3f88247a8.tar.bz2
fix: not checking bitmap size valid
Signed-off-by: William Henderson <william.henderson@nutanix.com>
-rw-r--r--lib/libvfio-user.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/lib/libvfio-user.c b/lib/libvfio-user.c
index cd1b558..eb2b064 100644
--- a/lib/libvfio-user.c
+++ b/lib/libvfio-user.c
@@ -1014,6 +1014,9 @@ handle_dma_device_feature_get(vfu_ctx_t *vfu_ctx, vfu_msg_t *msg,
(void *)req->data;
ssize_t bitmap_size = get_bitmap_size(rep->length, rep->page_size);
+ if (bitmap_size < 0) {
+ return bitmap_size;
+ }
msg->out.iov.iov_len = sizeof(struct vfio_user_device_feature)
+ sizeof(struct vfio_user_device_feature_dma_logging_report)