diff options
| author | Alex Williamson <alex.williamson@redhat.com> | 2013-03-26 18:33:16 +0100 |
|---|---|---|
| committer | Alex Williamson <alex.williamson@redhat.com> | 2013-03-26 18:33:16 +0100 |
| commit | 904c680c7bf016a8619a045850937427f8d7368c (patch) | |
| tree | c1f3e2c8ba7fb2e5f96070f8125003730a71d222 /samples/rpmsg | |
| parent | vfio: include <linux/slab.h> for kmalloc (diff) | |
| download | linux-904c680c7bf016a8619a045850937427f8d7368c.tar.xz linux-904c680c7bf016a8619a045850937427f8d7368c.zip | |
vfio-pci: Fix possible integer overflow
The VFIO_DEVICE_SET_IRQS ioctl takes a start and count parameter, both
of which are unsigned. We attempt to bounds check these, but fail to
account for the case where start is a very large number, allowing
start + count to wrap back into the valid range. Bounds check both
start and start + count.
Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Alex Williamson <alex.williamson@redhat.com>
Diffstat (limited to '')
0 files changed, 0 insertions, 0 deletions