diff options
| author | Dan Carpenter <dan.carpenter@oracle.com> | 2017-01-07 07:28:40 +0100 |
|---|---|---|
| committer | Alex Williamson <alex.williamson@redhat.com> | 2017-01-11 20:12:29 +0100 |
| commit | 5c677869e0abbffbade2cfd82d46d0eebe823f34 (patch) | |
| tree | 7f4659715113784f3c88cd1dc61414b0fcecf37e /arch/m32r | |
| parent | vfio-mdev: return -EFAULT if copy_to_user() fails (diff) | |
| download | linux-5c677869e0abbffbade2cfd82d46d0eebe823f34.tar.xz linux-5c677869e0abbffbade2cfd82d46d0eebe823f34.zip | |
vfio-mdev: buffer overflow in ioctl()
This is a sample driver for documentation so the impact is probably
pretty low. But we should check that bar_index is valid so we
don't write beyond the end of the mdev_state->region_info[] array.
Fixes: 9d1a546c53b4 ("docs: Sample driver to demonstrate how to use Mediated device framework.")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Kirti Wankhede <kwankhede@nvidia.com>
Signed-off-by: Alex Williamson <alex.williamson@redhat.com>
Diffstat (limited to 'arch/m32r')
0 files changed, 0 insertions, 0 deletions