mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git
synced 2025-01-01 10:42:11 +00:00
0e398290cf
The "msg->iova + msg->size" addition can have an integer overflow
if the iotlb message is from a malicious user space application.
So let's fix it.
Fixes:
|
||
---|---|---|
.. | ||
iotlb.c | ||
Kconfig | ||
Makefile | ||
net.c | ||
scsi.c | ||
test.c | ||
test.h | ||
vdpa.c | ||
vhost.c | ||
vhost.h | ||
vringh.c | ||
vsock.c |