diff options
| author | Dan Carpenter <[email protected]> | 2017-01-07 06:28:40 +0000 |
|---|---|---|
| committer | Alex Williamson <[email protected]> | 2017-01-11 19:12:29 +0000 |
| commit | 5c677869e0abbffbade2cfd82d46d0eebe823f34 (patch) | |
| tree | 7f4659715113784f3c88cd1dc61414b0fcecf37e /lib/timerqueue.c | |
| parent | vfio-mdev: return -EFAULT if copy_to_user() fails (diff) | |
| download | kernel-5c677869e0abbffbade2cfd82d46d0eebe823f34.tar.gz kernel-5c677869e0abbffbade2cfd82d46d0eebe823f34.zip | |
vfio-mdev: buffer overflow in ioctl()
This is a sample driver for documentation so the impact is probably
pretty low. But we should check that bar_index is valid so we
don't write beyond the end of the mdev_state->region_info[] array.
Fixes: 9d1a546c53b4 ("docs: Sample driver to demonstrate how to use Mediated device framework.")
Signed-off-by: Dan Carpenter <[email protected]>
Reviewed-by: Kirti Wankhede <[email protected]>
Signed-off-by: Alex Williamson <[email protected]>
Diffstat (limited to 'lib/timerqueue.c')
0 files changed, 0 insertions, 0 deletions