Jim Mattson 7a86dab8cf kvm: Change offset in kvm_write_guest_offset_cached to unsigned ... Since the offset is added directly to the hva from the gfn_to_hva_cache, a negative offset could result in an out of bounds write. The existing BUG_ON only checks for addresses beyond the end of the gfn_to_hva_cache, not for addresses before the start of the gfn_to_hva_cache. Note that all current call sites have non-negative offsets. Fixes: 4ec6e86362 ("kvm: Introduce kvm_write_guest_offset_cached()") Reported-by: Cfir Cohen <cfir@google.com> Signed-off-by: Jim Mattson <jmattson@google.com> Reviewed-by: Cfir Cohen <cfir@google.com> Reviewed-by: Peter Shier <pshier@google.com> Reviewed-by: Krish Sadhukhan <krish.sadhukhan@oracle.com> Reviewed-by: Sean Christopherson <sean.j.christopherson@intel.com> Signed-off-by: Radim Krčmář <rkrcmar@redhat.com>		2018-12-21 11:28:22 +01:00
..
acpi
asm-generic	s390 updates for 4.20-rc2	2018-11-09 06:30:44 -06:00
clocksource
crypto
drm	drm, i915, amdgpu, bridge + core quirk	2018-11-02 10:58:20 -07:00
dt-bindings	This time it looks like a quieter release cycle in the clk tree. I guess that's	2018-10-31 11:08:30 -07:00
keys
kvm	KVM: arm/arm64: Remove arch timer workqueue	2018-12-19 17:47:07 +00:00
linux	kvm: Change offset in kvm_write_guest_offset_cached to unsigned	2018-12-21 11:28:22 +01:00
math-emu
media	media: Use wait_queue_head_t for media_request	2018-11-20 12:53:23 -05:00
memory
misc
net	neighbour: Avoid writing before skb->head in neigh_hh_output()	2018-12-07 16:24:40 -08:00
pcmcia
ras
rdma
scsi
soc
sound	ALSA: pcm: Fix interval evaluation with openmin/max	2018-11-29 12:05:19 +01:00
target
trace	While rewriting the function graph tracer, I discovered a design flaw that	2018-11-30 09:32:34 -08:00
uapi	x86/kvm/hyper-v: Introduce KVM_GET_SUPPORTED_HV_CPUID	2018-12-14 17:59:54 +01:00
video
xen	Revert "xen/balloon: Mark unallocated host memory as UNUSABLE"	2018-11-29 17:53:31 +01:00