diff options
| author |   Amit Shah <amit.shah@redhat.com> | 2010-04-27 18:04:07 +0530 |
|---|---|---|
| committer |   Anthony Liguori <aliguori@us.ibm.com> | 2010-04-28 08:58:22 -0500 |
| commit | e61da14d60ba1cceacad8396adcb9662c7f690af (patch) | |
| tree | 9cbdcc118f7b67712da19faa5fb13e3bff24067b /hw/virtio-console.c | |
| parent | iov: Add iov_to_buf and iov_size helpers (diff) | |
| download | qemu-e61da14d60ba1cceacad8396adcb9662c7f690af.tar.xz qemu-e61da14d60ba1cceacad8396adcb9662c7f690af.zip | |
virtio-serial: Handle scatter-gather buffers for control messages
Current control messages are small enough to not be split into multiple
buffers but we could run into such a situation in the future or a
malicious guest could cause such a situation.
So handle the entire iov request for control messages.
Also ensure the size of the control request is >= what we expect
otherwise we risk accessing memory that we don't own.
Signed-off-by: Amit Shah <amit.shah@redhat.com>
CC: Avi Kivity <avi@redhat.com>
Reported-by: Avi Kivity <avi@redhat.com>
Signed-off-by: Anthony Liguori <aliguori@us.ibm.com>
Diffstat (limited to 'hw/virtio-console.c')
0 files changed, 0 insertions, 0 deletions