artulab
projects / openbsd / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f07c0e4) | patch
mask next descriptor value and fix chunk_size calculation
authordv <dv@openbsd.org>
Sun, 29 Aug 2021 12:17:38 +0000 (12:17 +0000)
committerdv <dv@openbsd.org>
Sun, 29 Aug 2021 12:17:38 +0000 (12:17 +0000)
commit1668094347d707a5f31d253952334112e927b797
treeda8432f09259e44bdd592175937882f3c65c245dtree | snapshot
parentf07c0e414a8e92958f9b4f5d54c47d30b63ac77ccommit | diff
mask next descriptor value and fix chunk_size calculation

Guest can cause out of bounds read with a malformed descriptor. In same
loop, also fix a chunk size calculation.

Reported by Ilja van Sprundel.

ok mlarkin@
usr.sbin/vmd/virtio.c diff | blob | history
OpenBSD src
by Ahmet Artu Yildirim