virtio-serial: Handle scatter-gather buffers for control messages
authorAmit Shah <amit.shah@redhat.com>
Tue, 27 Apr 2010 12:34:07 +0000 (18:04 +0530)
committerAnthony Liguori <aliguori@us.ibm.com>
Wed, 28 Apr 2010 13:58:22 +0000 (08:58 -0500)
commite61da14d60ba1cceacad8396adcb9662c7f690af
tree9cbdcc118f7b67712da19faa5fb13e3bff24067b
parentfa6111f215736e44f0ac4fc50947e6c407588c28
virtio-serial: Handle scatter-gather buffers for control messages

Current control messages are small enough to not be split into multiple
buffers but we could run into such a situation in the future or a
malicious guest could cause such a situation.

So handle the entire iov request for control messages.

Also ensure the size of the control request is >= what we expect
otherwise we risk accessing memory that we don't own.

Signed-off-by: Amit Shah <amit.shah@redhat.com>
CC: Avi Kivity <avi@redhat.com>
Reported-by: Avi Kivity <avi@redhat.com>
Signed-off-by: Anthony Liguori <aliguori@us.ibm.com>
hw/virtio-serial-bus.c