On Sun, 07 Jun 2026 08:48:34 -0400, Michael Bommarito wrote:
> virtblk_report_zones() trusts the device-reported number of zones when
> walking the report buffer:
> 
>       nz = min_t(u64, virtio64_to_cpu(vblk->vdev, report->nr_zones),
>                  nr_zones);
>       ...
>       for (i = 0; i < nz && zone_idx < nr_zones; i++) {
>               ret = virtblk_parse_zone(vblk, &report->zones[i], ...);
> 
> [...]

Applied, thanks!

[1/1] virtio-blk: clamp zone report to the report buffer capacity
      commit: 0fd835f5e9477ebea2439b8ada58f34e1b8cf25a

Best regards,
-- 
Jens Axboe




Reply via email to