Re: [PATCH v3 08/11] esp: don't overflow cmdfifo in get_cmd()

2021-04-01 Thread Mark Cave-Ayland
On 01/04/2021 09:19, Philippe Mathieu-Daudé wrote: On 4/1/21 9:49 AM, Mark Cave-Ayland wrote: If the guest tries to read a CDB using DMA and cmdfifo is not empty then it is possible to overflow cmdfifo. Since this can only occur by issuing deliberately incorrect instruction sequences, ensure t

Re: [PATCH v3 08/11] esp: don't overflow cmdfifo in get_cmd()

2021-04-01 Thread Philippe Mathieu-Daudé
On 4/1/21 9:49 AM, Mark Cave-Ayland wrote: > If the guest tries to read a CDB using DMA and cmdfifo is not empty then it is > possible to overflow cmdfifo. > > Since this can only occur by issuing deliberately incorrect instruction > sequences, ensure that the maximum length of the CDB transferred

[PATCH v3 08/11] esp: don't overflow cmdfifo in get_cmd()

2021-04-01 Thread Mark Cave-Ayland
If the guest tries to read a CDB using DMA and cmdfifo is not empty then it is possible to overflow cmdfifo. Since this can only occur by issuing deliberately incorrect instruction sequences, ensure that the maximum length of the CDB transferred to cmdfifo is limited to the available free space wi