Files
android_kernel_fxtec_sm6115/include/linux
Jim Mattson ad9241f24f kvm: Change offset in kvm_write_guest_offset_cached to unsigned
[ Upstream commit 7a86dab8cf2f0fdf508f3555dddfc236623bff60 ]

Since the offset is added directly to the hva from the
gfn_to_hva_cache, a negative offset could result in an out of bounds
write. The existing BUG_ON only checks for addresses beyond the end of
the gfn_to_hva_cache, not for addresses before the start of the
gfn_to_hva_cache.

Note that all current call sites have non-negative offsets.

Fixes: 4ec6e86362 ("kvm: Introduce kvm_write_guest_offset_cached()")
Reported-by: Cfir Cohen <cfir@google.com>
Signed-off-by: Jim Mattson <jmattson@google.com>
Reviewed-by: Cfir Cohen <cfir@google.com>
Reviewed-by: Peter Shier <pshier@google.com>
Reviewed-by: Krish Sadhukhan <krish.sadhukhan@oracle.com>
Reviewed-by: Sean Christopherson <sean.j.christopherson@intel.com>
Signed-off-by: Radim Krčmář <rkrcmar@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2019-02-12 19:47:16 +01:00
..
2018-11-21 09:19:16 +01:00
2018-08-09 14:05:30 -07:00
2018-07-24 14:43:26 -06:00
2018-08-22 10:52:48 -07:00
2018-07-22 14:13:43 +02:00
2018-07-24 19:11:26 +02:00
2018-07-12 10:04:29 -04:00
2018-11-13 11:08:50 -08:00
2018-07-27 09:57:23 +10:00
2018-09-04 21:31:43 +02:00
2018-08-08 11:06:20 +02:00
2018-07-12 21:35:28 +02:00
2018-08-22 10:52:45 -07:00
2018-07-10 17:22:35 +02:00
2018-07-19 11:34:23 +01:00
2018-07-25 13:41:22 -07:00
2018-07-21 10:43:12 -05:00
2018-08-22 10:52:46 -07:00
2018-07-20 01:11:45 +02:00
2018-08-02 17:33:06 -04:00
2018-08-02 17:16:05 +02:00
2019-01-31 08:14:31 +01:00
2018-07-07 17:25:23 +02:00
2018-08-16 12:14:42 -07:00
2018-11-13 11:08:51 -08:00