Re: [PATCH] hw/i386/intel_iommu: Fix out-of-bounds access on guest IRT

2020-03-10 Thread Peter Xu
On Tue, Mar 10, 2020 at 06:42:11PM +0100, Jan Kiszka wrote: > From: Jan Kiszka > > vtd_irte_get failed to check the index against the configured table > size, causing an out-of-bounds access on guest memory and potentially > misinterpreting the result. > > Signed-off-by: Jan Kiszka Reviewed-by

Re: [PATCH] hw/i386/intel_iommu: Fix out-of-bounds access on guest IRT

2020-03-10 Thread Paolo Bonzini
On 10/03/20 18:42, Jan Kiszka wrote: > From: Jan Kiszka > > vtd_irte_get failed to check the index against the configured table > size, causing an out-of-bounds access on guest memory and potentially > misinterpreting the result. > > Signed-off-by: Jan Kiszka > --- > > BTW, we still miss error