Michael S. Tsirkin c2abe8ada7 vhost/net: fix heads usage of ubuf_info ... [ Upstream commit 46aa92d1ba ] ubuf info allocator uses guest controlled head as an index, so a malicious guest could put the same head entry in the ring twice, and we will get two callbacks on the same value. To fix use upend_idx which is guaranteed to be unique. Reported-by: Rusty Russell <rusty@rustcorp.com.au> Signed-off-by: Michael S. Tsirkin <mst@redhat.com> Cc: stable@kernel.org Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2013-03-28 12:11:54 -07:00
..
Kconfig	net/macvtap: add vhost support	2010-02-18 14:08:38 -08:00
Makefile	vhost_net: a kernel-level virtio server	2010-01-15 01:43:29 -08:00
net.c	vhost/net: fix heads usage of ubuf_info	2013-03-28 12:11:54 -07:00
test.c	tools/virtio: fix up vhost/test module build	2012-04-12 10:35:42 +03:00
test.h	vhost test module	2010-12-09 16:00:21 +02:00
vhost.c	vhost: fix length for cross region descriptor	2013-03-04 06:06:43 +08:00
vhost.h	skbuff: struct ubuf_info callback type safety	2012-04-13 13:09:19 -04:00