On 2/18/2016 9:48 PM, Yuanhan Liu wrote:

+			if (unlikely(desc->next >= vq->size))
+				goto fail;

desc chains could be forged into a loop then vhost runs the dead loop
until it exhaust all mbuf memory.