diff options
| author | Junrui Luo <moonafterrain@outlook.com> | 2026-04-16 22:18:05 +0800 |
|---|---|---|
| committer | Wei Liu <wei.liu@kernel.org> | 2026-06-07 23:22:46 -0700 |
| commit | a4ffc59238be84dd1c26bf1c001543e832674fc6 (patch) | |
| tree | dae6de451f8b0debde233d16d1a05295d96f7955 /scripts/dummy-tools/python3 | |
| parent | 145613eb15eaed537825363a59523a0dcfa2d0f3 (diff) | |
mshv: add bounds check on vp_index in mshv_intercept_isr()
mshv_intercept_isr() extracts vp_index from the hypervisor message
payload and uses it directly to index into pt_vp_array without
validation. handle_bitset_message() and handle_pair_message() already
validate vp_index against MSHV_MAX_VPS before array access.
Add the same MSHV_MAX_VPS bounds check for consistency with the other
message handlers.
Fixes: 621191d709b1 ("Drivers: hv: Introduce mshv_root module to expose /dev/mshv to VMMs")
Reported-by: Yuhao Jiang <danisjiang@gmail.com>
Signed-off-by: Junrui Luo <moonafterrain@outlook.com>
Signed-off-by: Wei Liu <wei.liu@kernel.org>
Diffstat (limited to 'scripts/dummy-tools/python3')
0 files changed, 0 insertions, 0 deletions
