Akihiko Odaki 309051ac40 pcie_sriov: Validate NumVFs ...

The guest may write NumVFs greater than TotalVFs and that can lead
to buffer overflow in VF implementations.

Cc: qemu-stable@nongnu.org
Fixes: CVE-2024-26327
Fixes: 7c0fa8dff8 ("pcie: Add support for Single Root I/O Virtualization (SR/IOV)")
Signed-off-by: Akihiko Odaki <akihiko.odaki@daynix.com>
Message-Id: <20240228-reuse-v8-2-282660281e60@daynix.com>
Reviewed-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Reviewed-by: Sriram Yagnaraman <sriram.yagnaraman@ericsson.com>
(cherry picked from commit 6081b4243c)
Signed-off-by: Michael Tokarev <mjt@tls.msk.ru>

2024-03-14 21:24:34 +03:00

..

Kconfig

kconfig: add CONFIG_MSI_NONBROKEN

2019-03-18 09:39:57 +01:00

meson.build

hw/pci: PCIe Data Object Exchange emulation

2022-11-07 13:12:19 -05:00

msi.c

msi: fix MSI vector limit check in msi_set_mask()

2022-06-27 18:53:18 -04:00

msix.c

msix: unset PCIDevice::msix_vector_poll_notifier in rollback

2023-12-20 19:11:10 +03:00

pci_bridge.c

pci: fix PCI resource reserve capability on BE

2021-10-20 06:18:17 -04:00

pci_host.c

pci: do not respond config requests after PCI device eject

2023-08-04 07:37:06 +03:00

pci-stub.c

qapi: Extract PCI commands to 'pci.json'

2020-09-29 15:41:36 +02:00

pci.c

vfio-user: handle device interrupts

2022-06-15 16:43:42 +01:00

pcie_aer.c

Trivial: 3 char repeat typos

2022-06-28 11:06:02 +02:00

pcie_doe.c

hw/pci: PCIe Data Object Exchange emulation

2022-11-07 13:12:19 -05:00

pcie_host.c

Do not include exec/address-spaces.h if it's not really necessary

2021-05-02 17:24:51 +02:00

pcie_port.c

pci/pcie_port: Add pci_find_port_by_pn()

2022-05-13 07:57:26 -04:00

pcie_sriov.c

pcie_sriov: Validate NumVFs

2024-03-14 21:24:34 +03:00

pcie.c

pcie: Don't try triggering a LSI when not defined

2022-04-20 18:00:30 -03:00

shpc.c

Trivial: 3 char repeat typos

2022-06-28 11:06:02 +02:00

slotid_cap.c

pci: Convert shpc_init() to Error

2017-07-03 22:29:49 +03:00

trace-events

pcie: Add support for Single Root I/O Virtualization (SR/IOV)

2022-03-06 05:08:23 -05:00

trace.h

trace: switch position of headers to what Meson requires

2020-08-21 06:18:24 -04:00