Michael S. Tsirkin 46aa92d1ba vhost/net: fix heads usage of ubuf_info ... ubuf info allocator uses guest controlled head as an index, so a malicious guest could put the same head entry in the ring twice, and we will get two callbacks on the same value. To fix use upend_idx which is guaranteed to be unique. Reported-by: Rusty Russell <rusty@rustcorp.com.au> Signed-off-by: Michael S. Tsirkin <mst@redhat.com> Cc: stable@kernel.org Signed-off-by: David S. Miller <davem@davemloft.net>		2013-03-17 14:28:54 -04:00
..
Kconfig	drivers/vhost: remove depends on CONFIG_EXPERIMENTAL	2013-01-21 14:52:45 -08:00
Kconfig.tcm	drivers/vhost: remove depends on CONFIG_EXPERIMENTAL	2013-01-21 14:52:45 -08:00
Makefile	tcm_vhost: Initial merge for vhost level target fabric driver	2012-07-29 13:49:10 -07:00
net.c	vhost/net: fix heads usage of ubuf_info	2013-03-17 14:28:54 -04:00
tcm_vhost.c	tcm_vhost: Multi-queue support	2013-02-13 11:30:14 -08:00
tcm_vhost.h	tcm_vhost: Multi-queue support	2013-02-13 11:30:14 -08:00
test.c	vhost: Separate vhost-net features from vhost features	2012-07-22 01:21:53 +03:00
test.h	vhost test module	2010-12-09 16:00:21 +02:00
vhost.c	vhost_net: handle polling errors when setting backend	2013-01-29 15:43:03 -05:00
vhost.h	vhost_net: handle polling errors when setting backend	2013-01-29 15:43:03 -05:00