qemu/hw/rdma
Yuval Shaia 7b5d22fcb5 hw/pvrdma: Protect against buggy or malicious guest driver
Guest driver allocates and initialize page tables to be used as a ring
of descriptors for CQ and async events.
The page table that represents the ring, along with the number of pages
in the page table is passed to the device.
Currently our device supports only one page table for a ring.

Let's make sure that the number of page table entries the driver
reports, do not exceeds the one page table size.

Reported-by: Soul Chen <soulchen8650@gmail.com>
Signed-off-by: Yuval Shaia <yuval.shaia.ml@gmail.com>
Fixes: CVE-2023-1544
Message-ID: <20230301142926.18686-1-yuval.shaia.ml@gmail.com>
Signed-off-by: Thomas Huth <thuth@redhat.com>
Signed-off-by: zeng_chi <zengchi@kylinos.cn>
2024-05-28 10:56:27 +08:00
..
vmw hw/pvrdma: Protect against buggy or malicious guest driver 2024-05-28 10:56:27 +08:00
Kconfig New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
meson.build New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
rdma.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
rdma_backend.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
rdma_backend.h New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
rdma_backend_defs.h New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
rdma_rm.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
rdma_rm.h New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
rdma_rm_defs.h New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
rdma_utils.c New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
rdma_utils.h New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
trace-events New upstream version 7.1.0 2022-11-03 14:19:34 +08:00
trace.h New upstream version 7.1.0 2022-11-03 14:19:34 +08:00