Yuval Shaia 06c9bf032f hw/pvrdma: Protect against buggy or malicious guest driver ... Guest driver allocates and initialize page tables to be used as a ring of descriptors for CQ and async events. The page table that represents the ring, along with the number of pages in the page table is passed to the device. Currently our device supports only one page table for a ring. Let's make sure that the number of page table entries the driver reports, do not exceeds the one page table size. Reported-by: Soul Chen <soulchen8650@gmail.com> Signed-off-by: Yuval Shaia <yuval.shaia.ml@gmail.com> Fixes: CVE-2023-1544 Message-ID: <20230301142926.18686-1-yuval.shaia.ml@gmail.com> Signed-off-by: Thomas Huth <thuth@redhat.com> (cherry picked from commit 85fc35afa9) Signed-off-by: Michael Tokarev <mjt@tls.msk.ru>		2023-10-21 14:05:14 +03:00
..
pvrdma_cmd.c	hw/pvrdma: Protect against buggy or malicious guest driver	2023-03-30 12:19:04 +03:00
pvrdma_dev_ring.c	Use g_new() & friends where that makes obvious sense	2022-03-21 15:44:44 +01:00
pvrdma_dev_ring.h	pvrdma: wean code off pvrdma_ring.h kernel header	2021-03-15 16:41:22 +08:00
pvrdma_main.c	hw/pvrdma: Protect against buggy or malicious guest driver	2023-10-21 14:05:14 +03:00
pvrdma_qp_ops.c	Use g_new() & friends where that makes obvious sense	2022-03-21 15:44:44 +01:00
pvrdma_qp_ops.h	Clean up header guards that don't match their file name	2019-05-13 08:58:55 +02:00
pvrdma.h	pvrdma: wean code off pvrdma_ring.h kernel header	2021-03-15 16:41:22 +08:00
trace-events	docs: fix references to docs/devel/tracing.rst	2021-06-02 06:51:09 +02:00
trace.h	trace: switch position of headers to what Meson requires	2020-08-21 06:18:24 -04:00