46aa92d1ba
ubuf info allocator uses guest controlled head as an index, so a malicious guest could put the same head entry in the ring twice, and we will get two callbacks on the same value. To fix use upend_idx which is guaranteed to be unique. Reported-by: Rusty Russell <rusty@rustcorp.com.au> Signed-off-by: Michael S. Tsirkin <mst@redhat.com> Cc: stable@kernel.org Signed-off-by: David S. Miller <davem@davemloft.net> |
||
|---|---|---|
| .. | ||
| Kconfig | ||
| Kconfig.tcm | ||
| Makefile | ||
| net.c | ||
| tcm_vhost.c | ||
| tcm_vhost.h | ||
| test.c | ||
| test.h | ||
| vhost.c | ||
| vhost.h | ||