On 31/08/2017 10:50, Maxime Coquelin wrote: [..]
+reset_vring_queue(struct virtio_net *dev, uint32_t vring_idx) { + struct vhost_virtqueue *vq = dev->virtqueue[vring_idx]; int callfd;
Probably ought to have a bounds check on vring_idx..
On 31/08/2017 10:50, Maxime Coquelin wrote: [..]
+reset_vring_queue(struct virtio_net *dev, uint32_t vring_idx) { + struct vhost_virtqueue *vq = dev->virtqueue[vring_idx]; int callfd;
Probably ought to have a bounds check on vring_idx..