Re: [PATCH 1/2] vhost: fix queue number check when setting inflight FD

2022-03-10 Thread Maxime Coquelin
On 3/10/22 13:50, David Marchand wrote: From: Chenbo Xia In function vhost_user_set_inflight_fd, queue number in inflight message is used to access virtqueue. However, queue number could be larger than VHOST_MAX_VRING and cause write OOB as this number will be used to write inflight info in

[PATCH 1/2] vhost: fix queue number check when setting inflight FD

2022-03-10 Thread David Marchand
From: Chenbo Xia In function vhost_user_set_inflight_fd, queue number in inflight message is used to access virtqueue. However, queue number could be larger than VHOST_MAX_VRING and cause write OOB as this number will be used to write inflight info in virtqueue structure. This patch checks the qu