io/channel-socket.c · 51189e95d7b6447fcdf615f25abb0b7b961c2182 · Anton / libtcg

1 year ago

io/channel-socket: qio_channel_socket_flush(): improve msg validation · 35bafa95

Vladimir Sementsov-Ogievskiy authored 1 year ago


For SO_EE_ORIGIN_ZEROCOPY the 32-bit notification range is encoded
as [ee_info, ee_data] inclusively, so ee_info should be less or
equal to ee_data.

Signed-off-by: Vladimir Sementsov-Ogievskiy <vsementsov@yandex-team.ru>
Reviewed-by: Maksim Davydov <davydov-max@yandex-team.ru>
Message-id: 20231017125941.810461-7-vsementsov@yandex-team.ru
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>

35bafa95

History

io/channel-socket: qio_channel_socket_flush(): improve msg validation

Vladimir Sementsov-Ogievskiy authored 1 year ago


For SO_EE_ORIGIN_ZEROCOPY the 32-bit notification range is encoded
as [ee_info, ee_data] inclusively, so ee_info should be less or
equal to ee_data.

Signed-off-by: Vladimir Sementsov-Ogievskiy <vsementsov@yandex-team.ru>
Reviewed-by: Maksim Davydov <davydov-max@yandex-team.ru>
Message-id: 20231017125941.810461-7-vsementsov@yandex-team.ru
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>

channel-socket.c 27.03 KiB