Jason Wang 9476add03c vhost: reject zero size iova range ...

[ Upstream commit 813dbeb656 ]

We used to accept zero size iova range which will lead a infinite loop
in translate_desc(). Fixing this by failing the request in this case.

Reported-by: syzbot+d21e6e297322a900c128@syzkaller.appspotmail.com
Fixes: 6b1e6cc7 ("vhost: new device IOTLB API")
Signed-off-by: Jason Wang <jasowang@redhat.com>
Acked-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2023-05-15 12:23:27 +09:00

..

Kconfig

vhost: split out vringh Kconfig

2016-08-02 16:54:28 +03:00

Kconfig.vringh

vhost: split out vringh Kconfig

2016-08-02 16:54:28 +03:00

Makefile

VSOCK: Add Makefile and Kconfig

2016-08-02 02:57:30 +03:00

net.c

vhost: log dirty page correctly

2023-05-15 11:09:53 +09:00

scsi.c

vhost/scsi: truncate T10 PI iov_iter to prot_bytes

2023-05-15 09:27:05 +09:00

test.c

Merge 4.8-rc5 into char-misc-next

2016-09-05 08:04:07 +02:00

test.h

vhost test module

2010-12-09 16:00:21 +02:00

vhost.c

vhost: reject zero size iova range

2023-05-15 12:23:27 +09:00

vhost.h

vhost: log dirty page correctly

2023-05-15 11:09:53 +09:00

vringh.c

vringh: update for virtio 1.0 APIs

2014-12-15 23:49:28 +02:00

vsock.c

vhost/vsock: fix vhost vsock cid hashing inconsistent

2023-05-15 11:55:45 +09:00