diff options
| author |   Jason J. Herne <jjherne@linux.ibm.com> | 2022-10-21 10:50:02 -0400 |
|---|---|---|
| committer |   Vasily Gorbik <gor@linux.ibm.com> | 2022-10-26 14:47:31 +0200 |
| commit | e38de4804421b064a9c73c5a9b7f3df96b863e4b (patch) | |
| tree | 0f585f354158156b4aa830987e11c85a0c7bd4ef /drivers/s390 | |
| parent | s390/cio: fix out-of-bounds access on cio_ignore free (diff) | |
| download | linux-dev-e38de4804421b064a9c73c5a9b7f3df96b863e4b.tar.xz linux-dev-e38de4804421b064a9c73c5a9b7f3df96b863e4b.zip | |
s390/vfio-ap: Fix memory allocation for mdev_types array
The vfio-ap crypto driver fails to allocate memory for an array of
pointers used to pass supported mdev types to mdev_register_parent().
Since we only support a single mdev type, the fix is to allocate a
single entry in the ap_matrix_dev->mdev_types array.
Link: https://lore.kernel.org/r/20221021145905.15100-1-jjherne@linux.ibm.com
Fixes: da44c340c4fe ("vfio/mdev: simplify mdev_type handling")
Cc: stable@vger.kernel.org
Cc: Tony Krowiak <akrowiak@linux.ibm.com>
Reported-by: Christian Borntraeger <borntraeger@linux.ibm.com>
Reviewed-by: Matthew Rosato <mjrosato@linux.ibm.com>
Signed-off-by: Jason J. Herne <jjherne@linux.ibm.com>
Signed-off-by: Vasily Gorbik <gor@linux.ibm.com>
Diffstat (limited to 'drivers/s390')
| -rw-r--r-- | drivers/s390/crypto/vfio_ap_private.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/s390/crypto/vfio_ap_private.h b/drivers/s390/crypto/vfio_ap_private.h index 2eddd5f34ed3..976a65f32e7d 100644 --- a/drivers/s390/crypto/vfio_ap_private.h +++ b/drivers/s390/crypto/vfio_ap_private.h @@ -52,7 +52,7 @@ struct ap_matrix_dev { struct mutex guests_lock; /* serializes access to each KVM guest */ struct mdev_parent parent; struct mdev_type mdev_type; - struct mdev_type *mdev_types[]; + struct mdev_type *mdev_types[1]; }; extern struct ap_matrix_dev *matrix_dev; |