diff options
| author | Amit Shah <amit.shah@redhat.com> | 2010-04-27 18:04:07 +0530 |
|---|---|---|
| committer | Anthony Liguori <aliguori@us.ibm.com> | 2010-04-28 08:58:22 -0500 |
| commit | e61da14d60ba1cceacad8396adcb9662c7f690af (patch) | |
| tree | 9cbdcc118f7b67712da19faa5fb13e3bff24067b /qemu-thread.c | |
| parent | fa6111f215736e44f0ac4fc50947e6c407588c28 (diff) | |
virtio-serial: Handle scatter-gather buffers for control messages
Current control messages are small enough to not be split into multiple
buffers but we could run into such a situation in the future or a
malicious guest could cause such a situation.
So handle the entire iov request for control messages.
Also ensure the size of the control request is >= what we expect
otherwise we risk accessing memory that we don't own.
Signed-off-by: Amit Shah <amit.shah@redhat.com>
CC: Avi Kivity <avi@redhat.com>
Reported-by: Avi Kivity <avi@redhat.com>
Signed-off-by: Anthony Liguori <aliguori@us.ibm.com>
Diffstat (limited to 'qemu-thread.c')
0 files changed, 0 insertions, 0 deletions