diff options
author | Felipe Franciosi <felipe@nutanix.com> | 2020-10-28 13:47:03 +0000 |
---|---|---|
committer | Michael S. Tsirkin <mst@redhat.com> | 2020-10-30 06:48:53 -0400 |
commit | d68cdae30eef62dde61c8b8467a96c01c8f80270 (patch) | |
tree | dc6637d3e57451ec22727a1ff391def14f8c290d /hw/i386/intel_iommu.c | |
parent | adb29c027341ba095a3ef4beef6aaef86d3a520e (diff) |
virtio: skip guest index check on device load
QEMU must be careful when loading device state off migration streams to
prevent a malicious source from exploiting the emulator. Overdoing these
checks has the side effect of allowing a guest to "pin itself" in cloud
environments by messing with state which is entirely in its control.
Similarly to what f3081539 achieved in usb_device_post_load(), this
commit removes such a check from virtio_load(). Worth noting, the result
of a load without this check is the same as if a guest enables a VQ with
invalid indexes to begin with. That is, the virtual device is set in a
broken state (by the datapath handler) and must be reset.
Signed-off-by: Felipe Franciosi <felipe@nutanix.com>
Message-Id: <20201028134643.110698-1-felipe@nutanix.com>
Acked-by: Jason Wang <jasowang@redhat.com>
Reviewed-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Diffstat (limited to 'hw/i386/intel_iommu.c')
0 files changed, 0 insertions, 0 deletions