Re: [PATCH] hw/rdma: Fix possible mremap overflow in the pvrdma device (CVE-2021-3582)

2021-06-18 Thread Yuval Shaia
Reviewed-by: Yuval Shaia Tested-by: Yuval Shaia On Wed, 16 Jun 2021 at 14:06, Marcel Apfelbaum wrote: > From: Marcel Apfelbaum > > Ensure mremap boundaries not trusting the guest kernel to > pass the correct buffer length. > > Fixes: CVE-2021-3582 > Reported-by: VictorV (Kunlun Lab) >

Re: [PATCH] hw/rdma: Fix possible mremap overflow in the pvrdma device (CVE-2021-3582)

2021-06-17 Thread P J P
On Wednesday, 16 June, 2021, 04:36:09 pm IST, Marcel Apfelbaum wrote: >From: Marcel Apfelbaum >diff --git a/hw/rdma/vmw/pvrdma_cmd.c b/hw/rdma/vmw/pvrdma_cmd.c >index f59879e257..dadab4966b 100644 >--- a/hw/rdma/vmw/pvrdma_cmd.c >+++ b/hw/rdma/vmw/pvrdma_cmd.c >@@ -38,6 +38,12 @@ static void

[PATCH] hw/rdma: Fix possible mremap overflow in the pvrdma device (CVE-2021-3582)

2021-06-16 Thread Marcel Apfelbaum
From: Marcel Apfelbaum Ensure mremap boundaries not trusting the guest kernel to pass the correct buffer length. Fixes: CVE-2021-3582 Reported-by: VictorV (Kunlun Lab) Tested-by: VictorV (Kunlun Lab) Signed-off-by: Marcel Apfelbaum --- hw/rdma/vmw/pvrdma_cmd.c | 6 ++ 1 file changed, 6