Blame SOURCES/0001-vhost-fix-indirect-descriptors-table-translation-siz.patch
|
 |
a6040a |
From c7903f9048e1eae871651f72f066393f88c54f55 Mon Sep 17 00:00:00 2001
|
|
|
a6040a |
From: Maxime Coquelin <maxime.coquelin@redhat.com>
|
|
|
a6040a |
Date: Mon, 23 Apr 2018 11:33:38 +0200
|
|
|
a6040a |
Subject: [PATCH 01/11] vhost: fix indirect descriptors table translation size
|
|
|
a6040a |
|
|
|
a6040a |
This patch fixes the size passed at the indirect descriptor
|
|
|
a6040a |
table translation time, which is the len field of the descriptor,
|
|
|
a6040a |
and not a single descriptor.
|
|
|
a6040a |
|
|
|
a6040a |
This issue has been assigned CVE-2018-1059.
|
|
|
a6040a |
|
|
|
a6040a |
Fixes: 62fdb8255ae7 ("vhost: use the guest IOVA to host VA helper")
|
|
|
a6040a |
|
|
|
a6040a |
Signed-off-by: Maxime Coquelin <maxime.coquelin@redhat.com>
|
|
|
a6040a |
---
|
|
|
a6040a |
lib/librte_vhost/virtio_net.c | 2 +-
|
|
|
a6040a |
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
a6040a |
|
|
|
a6040a |
diff --git a/lib/librte_vhost/virtio_net.c b/lib/librte_vhost/virtio_net.c
|
|
|
a6040a |
index d347030..cb1d0cf 100644
|
|
|
a6040a |
--- a/lib/librte_vhost/virtio_net.c
|
|
|
a6040a |
+++ b/lib/librte_vhost/virtio_net.c
|
|
|
a6040a |
@@ -1329,5 +1329,5 @@
|
|
|
a6040a |
vhost_iova_to_vva(dev, vq,
|
|
|
a6040a |
vq->desc[desc_indexes[i]].addr,
|
|
|
a6040a |
- sizeof(*desc),
|
|
|
a6040a |
+ vq->desc[desc_indexes[i]].len,
|
|
|
a6040a |
VHOST_ACCESS_RO);
|
|
|
a6040a |
if (unlikely(!desc))
|
|
|
a6040a |
--
|
|
|
a6040a |
1.8.3.1
|
|
|
a6040a |
|