From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753031AbbJFPAi (ORCPT ); Tue, 6 Oct 2015 11:00:38 -0400 Received: from mx1.redhat.com ([209.132.183.28]:37402 "EHLO mx1.redhat.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752781AbbJFPAg (ORCPT ); Tue, 6 Oct 2015 11:00:36 -0400 Date: Tue, 6 Oct 2015 18:00:31 +0300 From: "Michael S. Tsirkin" To: Vlad Zolotarov Cc: hjk@hansjkoch.de, dev@dpdk.org, gregkh@linux-foundation.org, Stephen Hemminger , linux-kernel@vger.kernel.org Subject: Re: [dpdk-dev] [PATCH 2/2] uio: new driver to support PCI MSI-X Message-ID: <20151006175634-mutt-send-email-mst@redhat.com> References: <1443652138-31782-1-git-send-email-stephen@networkplumber.org> <1443652138-31782-3-git-send-email-stephen@networkplumber.org> <20151001104505-mutt-send-email-mst@redhat.com> <20151005215455.GA7608@redhat.com> <20151006013000-mutt-send-email-mst@redhat.com> <561384EF.8020100@cloudius-systems.com> <20151006164259-mutt-send-email-mst@redhat.com> <5613DF71.7090207@cloudius-systems.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <5613DF71.7090207@cloudius-systems.com> Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Tue, Oct 06, 2015 at 05:49:21PM +0300, Vlad Zolotarov wrote: > >and read/write the config space. > >This means that a single userspace bug is enough to corrupt kernel > >memory. > > Could u, pls., provide and example of this simple bug? Because it's > absolutely not obvious... Stick a value that happens to match a kernel address in Msg Addr field in an unmasked MSI-X entry. -- MST