Dan Carpenter 763d77241d xen/grants: prevent integer overflow in gnttab_dma_alloc_pages() ...

[ Upstream commit e9ea0b30ad ]

The change from kcalloc() to kvmalloc() means that arg->nr_pages
might now be large enough that the "args->nr_pages << PAGE_SHIFT" can
result in an integer overflow.

Fixes: b3f7931f5c ("xen/gntdev: switch from kcalloc() to kvcalloc()")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Juergen Gross <jgross@suse.com>
Link: https://lore.kernel.org/r/YxDROJqu/RPvR0bi@kili
Signed-off-by: Juergen Gross <jgross@suse.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2022-09-08 12:28:05 +02:00

..

events

…

xen-pciback

…

xenbus

xen/xenbus: fix return type in xenbus_file_read()

2022-08-25 11:40:14 +02:00

xenfs

…

acpi.c

…

arm-device.c

…

balloon.c

…

biomerge.c

…

cpu_hotplug.c

…

dbgp.c

…

efi.c

…

evtchn.c

…

features.c

x86/xen: Remove undefined behavior in setup_features()

2022-06-29 09:03:24 +02:00

gntalloc.c

…

gntdev-common.h

xen/gntdev: Avoid blocking in unmap_grant_pages()

2022-06-29 09:03:19 +02:00

gntdev-dmabuf.c

…

gntdev-dmabuf.h

…

gntdev.c

xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE

2022-07-21 21:24:23 +02:00

grant-table.c

xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()

2022-09-08 12:28:05 +02:00

Kconfig

…

Makefile

…

manage.c

…

mcelog.c

…

mem-reservation.c

…

pci.c

…

pcpu.c

…

platform-pci.c

…

privcmd-buf.c

…

privcmd.c

xen/privcmd: fix error exit of privcmd_ioctl_dm_op()

2022-08-31 17:16:49 +02:00

privcmd.h

…

pvcalls-back.c

…

pvcalls-front.c

…

pvcalls-front.h

…

swiotlb-xen.c

…

sys-hypervisor.c

…

time.c

…

unpopulated-alloc.c

…

xen-acpi-pad.c

…

xen-acpi-processor.c

…

xen-balloon.c

…

xen-front-pgdir-shbuf.c

…

xen-scsiback.c

…

xlate_mmu.c

…