Dan Carpenter 2e45354645 VMCI: integer overflow in vmci_datagram_dispatch() ...

This is untrusted user data from vmci_host_do_send_datagram() so the
VMCI_DG_SIZE() macro can have an integer overflow.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2014-09-23 23:26:42 -07:00

..

Kconfig

Hoist memcpy_fromiovec/memcpy_toiovec into lib/

2013-05-20 10:24:22 +09:30

Makefile

VMCI: Some header and config files.

2013-01-08 16:15:57 -08:00

vmci_context.c

…

vmci_context.h

…

vmci_datagram.c

VMCI: integer overflow in vmci_datagram_dispatch()

2014-09-23 23:26:42 -07:00

vmci_datagram.h

…

vmci_doorbell.c

hlist: drop the node parameter from iterators

2013-02-27 19:10:24 -08:00

vmci_doorbell.h

VMCI: doorbell implementation.

2013-01-08 16:15:55 -08:00

vmci_driver.c

VMCI: Add support for virtual IOMMU

2013-08-27 21:42:12 -07:00

vmci_driver.h

VMCI: Add support for virtual IOMMU

2013-08-27 21:42:12 -07:00

vmci_event.c

VMCI: event handling implementation.

2013-01-08 16:15:55 -08:00

vmci_event.h

VMCI: event handling implementation.

2013-01-08 16:15:55 -08:00

vmci_guest.c

misc: remove DEFINE_PCI_DEVICE_TABLE usage

2014-07-18 16:54:23 -07:00

vmci_handle_array.c

VMCI: handle array implementation.

2013-01-08 16:15:55 -08:00

vmci_handle_array.h

VMCI: handle array implementation.

2013-01-08 16:15:55 -08:00

vmci_host.c

vmw_vmci: Convert driver to use get_user_pages_fast()

2013-10-05 18:04:55 -07:00

vmci_queue_pair.c

vmw_vmci: Convert driver to use get_user_pages_fast()

2013-10-05 18:04:55 -07:00

vmci_queue_pair.h

VMCI: Remove non-blocking/pinned queuepair support

2013-08-27 21:42:12 -07:00

vmci_resource.c

hlist: drop the node parameter from iterators

2013-02-27 19:10:24 -08:00

vmci_resource.h

VMCI: resource object implementation.

2013-01-08 16:15:56 -08:00

vmci_route.c

VMCI: routing implementation.

2013-01-08 16:15:56 -08:00

vmci_route.h

VMCI: routing implementation.

2013-01-08 16:15:56 -08:00