linux/drivers/vhost
Michael S. Tsirkin 99975cc6ad vhost/net: length miscalculation
commit 8b38694a2d
    vhost/net: virtio 1.0 byte swap
had this chunk:
-       heads[headcount - 1].len += datalen;
+       heads[headcount - 1].len = cpu_to_vhost32(vq, len - datalen);

This adds datalen with the wrong sign, causing guest panics.

Fixes: 8b38694a2d
Reported-by: Alex Williamson <alex.williamson@redhat.com>
Suggested-by: Greg Kurz <gkurz@linux.vnet.ibm.com>
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
2015-01-07 12:22:00 +02:00
..
Kconfig vhost: Make vhost a separate module 2013-07-07 17:33:44 +03:00
Makefile vhost: Make vhost a separate module 2013-07-07 17:33:44 +03:00
net.c vhost/net: length miscalculation 2015-01-07 12:22:00 +02:00
scsi.c vhost/scsi: partial virtio 1.0 support 2014-12-09 12:06:31 +02:00
test.c vhost: move memory pointer to VQs 2014-06-09 16:21:07 +03:00
test.h
vhost.c vhost: relax used address alignment 2014-12-29 10:55:06 +02:00
vhost.h vhost: remove unnecessary forward declarations in vhost.h 2014-12-09 12:06:33 +02:00
vringh.c vringh: update for virtio 1.0 APIs 2014-12-15 23:49:28 +02:00