mirror of
https://github.com/Motorhead1991/qemu.git
synced 2025-12-30 11:10:33 -07:00
Guest driver might execute HW commands when shared buffers are not yet
allocated.
This could happen on purpose (malicious guest) or because of some other
guest/host address mapping error.
We need to protect againts such case.
Fixes: CVE-2022-1050
Reported-by: Raven <wxhusst@gmail.com>
Signed-off-by: Yuval Shaia <yuval.shaia.ml@gmail.com>
Message-Id: <20220403095234.2210-1-yuval.shaia.ml@gmail.com>
Signed-off-by: Laurent Vivier <laurent@vivier.eu>
(cherry picked from commit
|
||
|---|---|---|
| .. | ||
| vmw | ||
| Kconfig | ||
| meson.build | ||
| rdma.c | ||
| rdma_backend.c | ||
| rdma_backend.h | ||
| rdma_backend_defs.h | ||
| rdma_rm.c | ||
| rdma_rm.h | ||
| rdma_rm_defs.h | ||
| rdma_utils.c | ||
| rdma_utils.h | ||
| trace-events | ||
| trace.h | ||