summaryrefslogtreecommitdiffstats
path: root/hw/i386/intel_iommu.c
diff options
context:
space:
mode:
authorFelipe Franciosi2020-10-28 14:47:03 +0100
committerMichael S. Tsirkin2020-10-30 11:48:53 +0100
commitd68cdae30eef62dde61c8b8467a96c01c8f80270 (patch)
treedc6637d3e57451ec22727a1ff391def14f8c290d /hw/i386/intel_iommu.c
parentvhost-blk: set features before setting inflight feature (diff)
downloadqemu-d68cdae30eef62dde61c8b8467a96c01c8f80270.tar.gz
qemu-d68cdae30eef62dde61c8b8467a96c01c8f80270.tar.xz
qemu-d68cdae30eef62dde61c8b8467a96c01c8f80270.zip
virtio: skip guest index check on device load
QEMU must be careful when loading device state off migration streams to prevent a malicious source from exploiting the emulator. Overdoing these checks has the side effect of allowing a guest to "pin itself" in cloud environments by messing with state which is entirely in its control. Similarly to what f3081539 achieved in usb_device_post_load(), this commit removes such a check from virtio_load(). Worth noting, the result of a load without this check is the same as if a guest enables a VQ with invalid indexes to begin with. That is, the virtual device is set in a broken state (by the datapath handler) and must be reset. Signed-off-by: Felipe Franciosi <felipe@nutanix.com> Message-Id: <20201028134643.110698-1-felipe@nutanix.com> Acked-by: Jason Wang <jasowang@redhat.com> Reviewed-by: Michael S. Tsirkin <mst@redhat.com> Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Diffstat (limited to 'hw/i386/intel_iommu.c')
0 files changed, 0 insertions, 0 deletions