KVM: x86/xen: Validate port number in SCHEDOP_poll
authorDavid Woodhouse <dwmw@amazon.co.uk>
Sat, 12 Nov 2022 13:48:58 +0000 (13:48 +0000)
committerPaolo Bonzini <pbonzini@redhat.com>
Wed, 23 Nov 2022 23:58:44 +0000 (18:58 -0500)
commit4ea9439fd537313f3381f0af4ebbf05e3f51a58c
tree3f9d86b247a5c690bc218b6a24370320af7bdc57
parentd72cf8ffe460824fdc97f0a9295a2c4e0231a562
KVM: x86/xen: Validate port number in SCHEDOP_poll

We shouldn't allow guests to poll on arbitrary port numbers off the end
of the event channel table.

Fixes: 1a65105a5aba ("KVM: x86/xen: handle PV spinlocks slowpath")
[dwmw2: my bug though; the original version did check the validity as a
 side-effect of an idr_find() which I ripped out in refactoring.]
Reported-by: Michal Luczaj <mhal@rbox.co>
Signed-off-by: David Woodhouse <dwmw@amazon.co.uk>
Reviewed-by: Sean Christopherson <seanjc@google.com>
Cc: stable@kernel.org
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
arch/x86/kvm/xen.c