Skip to content
Snippets Groups Projects
Commit 66ae37d8 authored by Marcel Apfelbaum's avatar Marcel Apfelbaum
Browse files

pvrdma: Fix the ring init error flow (CVE-2021-3608)


Do not unmap uninitialized dma addresses.

Fixes: CVE-2021-3608
Reviewed-by: default avatarVictorV (Kunlun Lab) <vv474172261@gmail.com>
Tested-by: default avatarVictorV (Kunlun Lab) <vv474172261@gmail.com>
Signed-off-by: default avatarMarcel Apfelbaum <marcel@redhat.com>
Message-Id: <20210630115246.2178219-1-marcel@redhat.com>
Tested-by: default avatarYuval Shaia <yuval.shaia.ml@gmail.com>
Reviewed-by: default avatarYuval Shaia <yuval.shaia.ml@gmail.com>
Reviewed-by: default avatarPhilippe Mathieu-Daudé <philmd@redhat.com>
Signed-off-by: default avatarMarcel Apfelbaum <marcel.apfelbaum@gmail.com>
parent 32e5703c
No related branches found
No related tags found
No related merge requests found
......@@ -41,7 +41,7 @@ int pvrdma_ring_init(PvrdmaRing *ring, const char *name, PCIDevice *dev,
qatomic_set(&ring->ring_state->cons_head, 0);
*/
ring->npages = npages;
ring->pages = g_malloc(npages * sizeof(void *));
ring->pages = g_malloc0(npages * sizeof(void *));
for (i = 0; i < npages; i++) {
if (!tbl[i]) {
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment