Michael S. Tsirkin 99975cc6ad vhost/net: length miscalculation ...

commit 8b38694a2d
    vhost/net: virtio 1.0 byte swap
had this chunk:
-       heads[headcount - 1].len += datalen;
+       heads[headcount - 1].len = cpu_to_vhost32(vq, len - datalen);

This adds datalen with the wrong sign, causing guest panics.

Fixes: 8b38694a2d
Reported-by: Alex Williamson <alex.williamson@redhat.com>
Suggested-by: Greg Kurz <gkurz@linux.vnet.ibm.com>
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>

2015-01-07 12:22:00 +02:00

..

Kconfig

vhost: Make vhost a separate module

2013-07-07 17:33:44 +03:00

Makefile

vhost: Make vhost a separate module

2013-07-07 17:33:44 +03:00

net.c

vhost/net: length miscalculation

2015-01-07 12:22:00 +02:00

scsi.c

vhost/scsi: partial virtio 1.0 support

2014-12-09 12:06:31 +02:00

test.c

vhost: move memory pointer to VQs

2014-06-09 16:21:07 +03:00

test.h

vhost test module

2010-12-09 16:00:21 +02:00

vhost.c

vhost: relax used address alignment

2014-12-29 10:55:06 +02:00

vhost.h

vhost: remove unnecessary forward declarations in vhost.h

2014-12-09 12:06:33 +02:00

vringh.c

vringh: update for virtio 1.0 APIs

2014-12-15 23:49:28 +02:00