Michael S. Tsirkin
2022-Jun-13 14:20 UTC
[PATCH] virtio_ring : fix vring_packed_desc memory out of bounds bug
On Mon, Jun 13, 2022 at 10:17:58PM +0800, ?? wrote:> OK, thank you for the explanation, I get it. By the way, if we could > fix the the OOB access first, it seems that even if we do this, the > OOB access also exists. > > I think we can do this since 16bit/32bit operations are guaranteed to be atomic. > > BRPresumably as we are reworking the code we'll make sure any value written into last_used_idx is within bounds. -- MST