Revision ef15ddeeb6bee87c044bf7754fac524545bf71e8 authored by Aleksandr Mishin on 28 March 2024, 16:55:05 UTC, committed by David S. Miller on 03 April 2024, 10:00:33 UTC
In rvu_map_cgx_lmac_pf() the 'iter', which is used as an array index, can reach value (up to 14) that exceed the size (MAX_LMAC_COUNT = 8) of the array. Fix this bug by adding 'iter' value check. Found by Linux Verification Center (linuxtesting.org) with SVACE. Fixes: 91c6945ea1f9 ("octeontx2-af: cn10k: Add RPM MAC support") Signed-off-by: Aleksandr Mishin <amishin@t-argos.ru> Signed-off-by: David S. Miller <davem@davemloft.net>
1 parent c53fe72
File | Mode | Size |
---|---|---|
Kconfig | -rw-r--r-- | 2.2 KB |
Makefile.kvm | -rw-r--r-- | 540 bytes |
async_pf.c | -rw-r--r-- | 6.4 KB |
async_pf.h | -rw-r--r-- | 518 bytes |
binary_stats.c | -rw-r--r-- | 4.5 KB |
coalesced_mmio.c | -rw-r--r-- | 4.8 KB |
coalesced_mmio.h | -rw-r--r-- | 884 bytes |
dirty_ring.c | -rw-r--r-- | 5.3 KB |
eventfd.c | -rw-r--r-- | 23.6 KB |
guest_memfd.c | -rw-r--r-- | 12.3 KB |
irqchip.c | -rw-r--r-- | 5.6 KB |
kvm_main.c | -rw-r--r-- | 166.9 KB |
kvm_mm.h | -rw-r--r-- | 1.9 KB |
pfncache.c | -rw-r--r-- | 11.2 KB |
vfio.c | -rw-r--r-- | 7.7 KB |
vfio.h | -rw-r--r-- | 289 bytes |
![swh spinner](/static/img/swh-spinner.gif)
Computing file changes ...