diff options
| author | Gabriel Krisman Bertazi <krisman@collabora.com> | 2020-03-17 01:45:06 +0100 |
|---|---|---|
| committer | Richard Weinberger <richard@nod.at> | 2020-03-29 23:21:33 +0200 |
| commit | 6e682d53fc1ef73a169e2a5300326cb23abb32ee (patch) | |
| tree | a13449f41b0c5467b26d7e9f9e6b6ab9021e05ce /lib/devres.c | |
| parent | um: Fix overlapping ELF segments when statically linked (diff) | |
| download | linux-6e682d53fc1ef73a169e2a5300326cb23abb32ee.tar.xz linux-6e682d53fc1ef73a169e2a5300326cb23abb32ee.zip | |
um: ubd: Prevent buffer overrun on command completion
On the hypervisor side, when completing commands and the pipe is full,
we retry writing only the entries that failed, by offsetting
io_req_buffer, but we don't reduce the number of bytes written, which
can cause a buffer overrun of io_req_buffer, and write garbage to the
pipe.
Cc: Martyn Welch <martyn.welch@collabora.com>
Signed-off-by: Gabriel Krisman Bertazi <krisman@collabora.com>
Signed-off-by: Richard Weinberger <richard@nod.at>
Diffstat (limited to 'lib/devres.c')
0 files changed, 0 insertions, 0 deletions