projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 236cf17) | patch
arm/arm64: KVM: Feed initialized memory to MMIO accesses
authorMarc Zyngier <marc.zyngier@arm.com>
Mon, 15 Feb 2016 17:04:04 +0000 (17:04 +0000)
committerMarc Zyngier <marc.zyngier@arm.com>
Wed, 24 Feb 2016 11:53:09 +0000 (11:53 +0000)
commit1d6a821277aaa0cdd666278aaff93298df313d41
tree1e2326fcf2543367d7b7b47166eb2191224940e2tree | snapshot
parent236cf17c2502007a9d2dda3c39fb0d9a6bd03cc2commit | diff
arm/arm64: KVM: Feed initialized memory to MMIO accesses

On an MMIO access, we always copy the on-stack buffer info
the shared "run" structure, even if this is a read access.
This ends up leaking up to 8 bytes of uninitialized memory
into userspace, depending on the size of the access.

An obvious fix for this one is to only perform the copy if
this is an actual write.

Reviewed-by: Christoffer Dall <christoffer.dall@linaro.org>
Signed-off-by: Marc Zyngier <marc.zyngier@arm.com>
arch/arm/kvm/mmio.c diff | blob | blame | history
Linux Project Source (from git://github.com/torvalds/linux)