All of lore.kernel.org
 help / color / mirror / Atom feed
* [Qemu-devel] [PATCH for-2.7 0/4] virtio-balloon: fix stats vq migration
@ 2016-08-12 15:32 Stefan Hajnoczi
  2016-08-12 15:32 ` [Qemu-devel] [PATCH for-2.7 1/4] virtio: recalculate vq->inuse after migration Stefan Hajnoczi
                   ` (5 more replies)
  0 siblings, 6 replies; 15+ messages in thread
From: Stefan Hajnoczi @ 2016-08-12 15:32 UTC (permalink / raw)
  To: qemu-devel; +Cc: Luiz Capitulino, Michael S. Tsirkin, gaudenz, Stefan Hajnoczi

Gaudenz Steinlin <gaudenz@debian.org> reported that virtqueue_pop() terminates
QEMU because the virtqueue size is exceeded following the CVE-2016-5403 fix.  I
have been unable to reproduce this or understand the root cause by code
inspection.  Along the way I did discover a few bugs in virtio-balloon and
virtio code.

Please see the individual patches for details.

Gaudenz: If you can reproduce the bug you reported, please try again with these
patches applied.

Stefan Hajnoczi (4):
  virtio: recalculate vq->inuse after migration
  virtio: decrement vq->inuse in virtqueue_discard()
  virtio: add virtqueue_rewind()
  virtio-balloon: fix stats vq migration

 hw/virtio/virtio-balloon.c | 10 ++++++++++
 hw/virtio/virtio.c         | 37 +++++++++++++++++++++++++++++++++++++
 include/hw/virtio/virtio.h |  1 +
 3 files changed, 48 insertions(+)

-- 
2.7.4

^ permalink raw reply	[flat|nested] 15+ messages in thread

end of thread, other threads:[~2016-08-15 23:06 UTC | newest]

Thread overview: 15+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2016-08-12 15:32 [Qemu-devel] [PATCH for-2.7 0/4] virtio-balloon: fix stats vq migration Stefan Hajnoczi
2016-08-12 15:32 ` [Qemu-devel] [PATCH for-2.7 1/4] virtio: recalculate vq->inuse after migration Stefan Hajnoczi
2016-08-12 21:30   ` Michael S. Tsirkin
2016-08-14 11:12   ` Fam Zheng
2016-08-15  8:23   ` Cornelia Huck
2016-08-12 15:32 ` [Qemu-devel] [PATCH for-2.7 2/4] virtio: decrement vq->inuse in virtqueue_discard() Stefan Hajnoczi
2016-08-12 21:31   ` Michael S. Tsirkin
2016-08-15  8:24   ` Cornelia Huck
2016-08-12 15:32 ` [Qemu-devel] [PATCH for-2.7 3/4] virtio: add virtqueue_rewind() Stefan Hajnoczi
2016-08-15  8:36   ` Cornelia Huck
2016-08-15 12:34     ` Stefan Hajnoczi
2016-08-12 15:32 ` [Qemu-devel] [PATCH for-2.7 4/4] virtio-balloon: fix stats vq migration Stefan Hajnoczi
2016-08-12 19:43 ` [Qemu-devel] [PATCH for-2.7 0/4] " no-reply
2016-08-15 19:51 ` Gaudenz Steinlin
2016-08-15 21:26   ` Michael S. Tsirkin

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.