[dpdk-dev] [PATCH 00/12] Vhost: CVE-2018-1059 fixes

Maxime Coquelin maxime.coquelin at redhat.com
Mon Apr 23 17:58:06 CEST 2018


This series fixes the security vulnerability referenced
as CVE-2018-1059.

Patches are already applied to the branch, but reviews
are encouraged. Any issues spotted would be fixed on top.

Maxime Coquelin (12):
  vhost: fix indirect descriptors table translation size
  vhost: check all range is mapped when translating GPAs
  vhost: introduce safe API for GPA translation
  vhost: ensure all range is mapped when translating QVAs
  vhost: add support for non-contiguous indirect descs tables
  vhost: handle virtually non-contiguous buffers in Tx
  vhost: handle virtually non-contiguous buffers in Rx
  vhost: handle virtually non-contiguous buffers in Rx-mrg
  examples/vhost: move to safe GPA translation API
  examples/vhost_scsi: move to safe GPA translation API
  vhost/crypto: move to safe GPA translation API
  vhost: deprecate unsafe GPA translation API

 examples/vhost/virtio_net.c            |  94 +++++++-
 examples/vhost_scsi/vhost_scsi.c       |  56 ++++-
 lib/librte_vhost/rte_vhost.h           |  46 ++++
 lib/librte_vhost/rte_vhost_version.map |   4 +-
 lib/librte_vhost/vhost.c               |  39 ++--
 lib/librte_vhost/vhost.h               |   8 +-
 lib/librte_vhost/vhost_crypto.c        |  65 ++++--
 lib/librte_vhost/vhost_user.c          |  58 +++--
 lib/librte_vhost/virtio_net.c          | 411 ++++++++++++++++++++++++++++-----
 9 files changed, 650 insertions(+), 131 deletions(-)

-- 
2.14.3



More information about the dev mailing list