diff options
| author | Ed Maste <emaste@FreeBSD.org> | 2024-09-19 18:57:42 +0000 |
|---|---|---|
| committer | Ed Maste <emaste@FreeBSD.org> | 2024-09-24 17:31:09 +0000 |
| commit | 867aaad5c2bfdd8326fc805964e711ccfbb18d1e (patch) | |
| tree | 5e8c2414a003b469bffd2afcc7cea73f57d244a4 /sys/libkern | |
| parent | f616b13bb35a5ffcc904d5282f09d93fe9d3a305 (diff) | |
| download | src-stable/13.tar.gz src-stable/13.zip | |
bhyve: validate corb->wp to avoid infinite loopstable/13
Guests must set HDAC_CORBWP less than corb->size. Treat invalid values
as an error rather than entering an infinite loop.
Reported by: Synacktiv
Reviewed by: markj
Security: HYP-12
Sponsored by: The Alpha-Omega Project
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D46134
(cherry picked from commit a305f44d1404fbf386bb2b50ab7233ce9eabe0bb)
(cherry picked from commit 6a645bb3535cb73b1f20db652c9e3893f26a986e)
Diffstat (limited to 'sys/libkern')
0 files changed, 0 insertions, 0 deletions