upstream/opnsense-src
1
0
Fork 0
mirror of https://github.com/opnsense/src.git synced 2026-02-23 09:56:47 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions
opnsense-src/sys/dev/beri
History
Pierre Pronchery ed03c30990 bhyve: avoid TOCTOU on iov_len in virtio_vq_recordon() 
Avoid a race condition when accessing guest memory, by reading memory
contents only once.

This has also been applied to _vq_record() in
sys/dev/beri/virtio/virtio.c, as per markj@'s suggestion.

Reported by:	Synacktiv
Reviewed by:	markj
Security:	HYP-10
Sponsored by:	The Alpha-Omega Project
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D45735

(cherry picked from commit 869d760cb9d7a307faa2fbe8c1c2b238a81b74d4)
2024-10-02 16:37:09 -04:00
..
virtio bhyve: avoid TOCTOU on iov_len in virtio_vq_recordon() 2024-10-02 16:37:09 -04:00
beri_mem.c sys: Remove $FreeBSD$: one-line .c pattern 2023-08-16 11:54:36 -06:00
beri_ring.c sys: Remove $FreeBSD$: one-line .c pattern 2023-08-16 11:54:36 -06:00