On Tue, Oct 21, 2014 at 04:46:58PM +0200, Matej Mužila wrote:
From: Matej Mužila mmuz...@redhat.com
Check if cpmsg-size is in limits of DATA_FRAGMENT
Signed-off-by: Matej Mužila mmuz...@redhat.com
---
If corrupted data are read from /dev/vmbus/hv_fcopy, pwrite can
read from memory
From: Matej Mužila mmuz...@redhat.com
Check if cpmsg-size is in limits of DATA_FRAGMENT
Signed-off-by: Matej Mužila mmuz...@redhat.com
---
If corrupted data are read from /dev/vmbus/hv_fcopy, pwrite can
read from memory outside of the buffer (defined at line 138).
Added check.
Changes made