diff options
| author | Amit Shah <amit.shah@redhat.com> | 2010-04-27 18:04:07 +0530 |
|---|---|---|
| committer | Anthony Liguori <aliguori@us.ibm.com> | 2010-04-28 08:58:22 -0500 |
| commit | e61da14d60ba1cceacad8396adcb9662c7f690af (patch) | |
| tree | 9cbdcc118f7b67712da19faa5fb13e3bff24067b /hw/virtio-console.c | |
| parent | fa6111f215736e44f0ac4fc50947e6c407588c28 (diff) | |
| download | focaccia-qemu-e61da14d60ba1cceacad8396adcb9662c7f690af.tar.gz focaccia-qemu-e61da14d60ba1cceacad8396adcb9662c7f690af.zip | |
virtio-serial: Handle scatter-gather buffers for control messages
Current control messages are small enough to not be split into multiple buffers but we could run into such a situation in the future or a malicious guest could cause such a situation. So handle the entire iov request for control messages. Also ensure the size of the control request is >= what we expect otherwise we risk accessing memory that we don't own. Signed-off-by: Amit Shah <amit.shah@redhat.com> CC: Avi Kivity <avi@redhat.com> Reported-by: Avi Kivity <avi@redhat.com> Signed-off-by: Anthony Liguori <aliguori@us.ibm.com>
Diffstat (limited to 'hw/virtio-console.c')
0 files changed, 0 insertions, 0 deletions