Re: [dpdk-dev] [PATCH 1/3] vhost: fix dead loop in enqueue path

On 01/22/2017 09:46 AM, Yuanhan Liu wrote: If a malicious guest forges a dead loop desc chain (let desc->next point to itself) and desc->len is zero, this could lead to a dead loop in copy_mbuf_to_desc(following is a simplified code to show this issue clearly): while (mbuf_is_not_totally_c

[dpdk-dev] [PATCH 1/3] vhost: fix dead loop in enqueue path

If a malicious guest forges a dead loop desc chain (let desc->next point to itself) and desc->len is zero, this could lead to a dead loop in copy_mbuf_to_desc(following is a simplified code to show this issue clearly): while (mbuf_is_not_totally_consumed) { if (desc_avail == 0) {