diff options
| author | Zelin Deng <zelin.deng@linux.alibaba.com> | 2021-09-29 08:13:49 +0300 |
|---|---|---|
| committer | Paolo Bonzini <pbonzini@redhat.com> | 2021-09-30 11:08:15 +0300 |
| commit | 773e89ab0056aaa2baa1ffd9f044551654410104 (patch) | |
| tree | 21f02e8fab3cd99d60b240830e0b7e2897ada3df /arch | |
| parent | ad9af930680bb396c87582edc172b3a7cf2a3fbf (diff) | |
| download | linux-773e89ab0056aaa2baa1ffd9f044551654410104.tar.xz | |
ptp: Fix ptp_kvm_getcrosststamp issue for x86 ptp_kvm
hv_clock is preallocated to have only HVC_BOOT_ARRAY_SIZE (64) elements;
if the PTP_SYS_OFFSET_PRECISE ioctl is executed on vCPUs whose index is
64 of higher, retrieving the struct pvclock_vcpu_time_info pointer with
"src = &hv_clock[cpu].pvti" will result in an out-of-bounds access and
a wild pointer. Change it to "this_cpu_pvti()" which is guaranteed to
be valid.
Fixes: 95a3d4454bb1 ("Switch kvmclock data to a PER_CPU variable")
Signed-off-by: Zelin Deng <zelin.deng@linux.alibaba.com>
Cc: <stable@vger.kernel.org>
Message-Id: <1632892429-101194-3-git-send-email-zelin.deng@linux.alibaba.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Diffstat (limited to 'arch')
0 files changed, 0 insertions, 0 deletions