diff options
| author | Cornelia Huck <cornelia.huck@de.ibm.com> | 2015-03-20 13:08:36 +0100 |
|---|---|---|
| committer | Cornelia Huck <cornelia.huck@de.ibm.com> | 2015-03-30 09:25:17 +0200 |
| commit | 590fe5722b522e492a9c78adadae4def35b137dd (patch) | |
| tree | c82b2449005a9f38b8ccf410c9ed7094acc9355e /hw/misc | |
| parent | 627f91b1f80fecc73d00727181a9ddb6162cc30e (diff) | |
virtio-ccw: fix range check for SET_VQ
VIRTIO_PCI_QUEUE_MAX is already too big; a malicious guest would be
able to trigger a write beyond the VirtQueue structure.
Cc: qemu-stable@nongnu.org
Reviewed-by: David Hildenbrand <dahi@linux.vnet.ibm.com>
Acked-by: Christian Borntraeger <borntraeger@de.ibm.com>
Signed-off-by: Cornelia Huck <cornelia.huck@de.ibm.com>
Diffstat (limited to 'hw/misc')
0 files changed, 0 insertions, 0 deletions