Avi Kivity ec90b61137 KVM: Fix buffer overflow in kvm_set_irq() ... commit f2ebd422f7 upstream. kvm_set_irq() has an internal buffer of three irq routing entries, allowing connecting a GSI to three IRQ chips or on MSI. However setup_routing_entry() does not properly enforce this, allowing three irqchip routes followed by an MSI route to overflow the buffer. Fix by ensuring that an MSI entry is added to an empty list. Signed-off-by: Avi Kivity <avi@redhat.com> Signed-off-by: Ben Hutchings <ben@decadent.org.uk> Cc: Li Zefan <lizefan@huawei.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2014-02-20 10:45:33 -08:00
..
assigned-dev.c	KVM: Convert intx_mask_lock to spin lock	2012-03-20 12:41:24 +02:00
async_pf.c
async_pf.h
coalesced_mmio.c	KVM: make checks stricter in coalesced_mmio_in_range()	2011-12-27 11:17:07 +02:00
coalesced_mmio.h	KVM: Make coalesced mmio use a device per zone	2011-09-25 19:17:57 +03:00
eventfd.c	KVM: Intelligent device lookup on I/O bus	2011-09-25 19:17:59 +03:00
ioapic.c	KVM: Fix bounds checking in ioapic indirect register reads (CVE-2013-1798)	2013-04-25 21:19:55 -07:00
ioapic.h
iodev.h
iommu.c	KVM: lock slots_lock around device assignment	2012-04-19 00:04:18 -03:00
irq_comm.c	KVM: Fix buffer overflow in kvm_set_irq()	2014-02-20 10:45:33 -08:00
Kconfig
kvm_main.c	KVM: Improve create VCPU parameter (CVE-2013-4587)	2013-12-20 07:34:19 -08:00