From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mx1.redhat.com (mx3-rdu2.redhat.com [66.187.233.73]) by dpdk.org (Postfix) with ESMTP id 818A54C6F for ; Mon, 23 Apr 2018 17:58:42 +0200 (CEST) Received: from smtp.corp.redhat.com (int-mx04.intmail.prod.int.rdu2.redhat.com [10.11.54.4]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.redhat.com (Postfix) with ESMTPS id 7DA334270964 for ; Mon, 23 Apr 2018 15:58:41 +0000 (UTC) Received: from localhost.localdomain (ovpn-112-58.ams2.redhat.com [10.36.112.58]) by smtp.corp.redhat.com (Postfix) with ESMTP id CC91B2023239; Mon, 23 Apr 2018 15:58:40 +0000 (UTC) From: Maxime Coquelin To: dev@dpdk.org Cc: Maxime Coquelin Date: Mon, 23 Apr 2018 17:58:06 +0200 Message-Id: <20180423155818.21285-1-maxime.coquelin@redhat.com> X-Scanned-By: MIMEDefang 2.78 on 10.11.54.4 X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.5.16 (mx1.redhat.com [10.11.55.7]); Mon, 23 Apr 2018 15:58:41 +0000 (UTC) X-Greylist: inspected by milter-greylist-4.5.16 (mx1.redhat.com [10.11.55.7]); Mon, 23 Apr 2018 15:58:41 +0000 (UTC) for IP:'10.11.54.4' DOMAIN:'int-mx04.intmail.prod.int.rdu2.redhat.com' HELO:'smtp.corp.redhat.com' FROM:'maxime.coquelin@redhat.com' RCPT:'' Subject: [dpdk-dev] [PATCH 00/12] Vhost: CVE-2018-1059 fixes X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 23 Apr 2018 15:58:42 -0000 This series fixes the security vulnerability referenced as CVE-2018-1059. Patches are already applied to the branch, but reviews are encouraged. Any issues spotted would be fixed on top. Maxime Coquelin (12): vhost: fix indirect descriptors table translation size vhost: check all range is mapped when translating GPAs vhost: introduce safe API for GPA translation vhost: ensure all range is mapped when translating QVAs vhost: add support for non-contiguous indirect descs tables vhost: handle virtually non-contiguous buffers in Tx vhost: handle virtually non-contiguous buffers in Rx vhost: handle virtually non-contiguous buffers in Rx-mrg examples/vhost: move to safe GPA translation API examples/vhost_scsi: move to safe GPA translation API vhost/crypto: move to safe GPA translation API vhost: deprecate unsafe GPA translation API examples/vhost/virtio_net.c | 94 +++++++- examples/vhost_scsi/vhost_scsi.c | 56 ++++- lib/librte_vhost/rte_vhost.h | 46 ++++ lib/librte_vhost/rte_vhost_version.map | 4 +- lib/librte_vhost/vhost.c | 39 ++-- lib/librte_vhost/vhost.h | 8 +- lib/librte_vhost/vhost_crypto.c | 65 ++++-- lib/librte_vhost/vhost_user.c | 58 +++-- lib/librte_vhost/virtio_net.c | 411 ++++++++++++++++++++++++++++----- 9 files changed, 650 insertions(+), 131 deletions(-) -- 2.14.3