mirror of
https://github.com/Motorhead1991/qemu.git
synced 2026-01-05 14:07:41 -07:00
Guest driver might execute HW commands when shared buffers are not yet
allocated.
This could happen on purpose (malicious guest) or because of some other
guest/host address mapping error.
We need to protect againts such case.
Fixes: CVE-2022-1050
Reported-by: Raven <wxhusst@gmail.com>
Signed-off-by: Yuval Shaia <yuval.shaia.ml@gmail.com>
Message-Id: <20220403095234.2210-1-yuval.shaia.ml@gmail.com>
Signed-off-by: Laurent Vivier <laurent@vivier.eu>
(cherry picked from commit
|
||
|---|---|---|
| .. | ||
| pvrdma.h | ||
| pvrdma_cmd.c | ||
| pvrdma_dev_ring.c | ||
| pvrdma_dev_ring.h | ||
| pvrdma_main.c | ||
| pvrdma_qp_ops.c | ||
| pvrdma_qp_ops.h | ||
| trace-events | ||
| trace.h | ||