Re: [PATCH] hv_netvsc: Add validation for untrusted Hyper-V values
From: David Miller <davem@davemloft.net>
Date: 2020-07-30 23:50:00
Also in:
lkml, netdev
From: David Miller <davem@davemloft.net>
Date: 2020-07-30 23:50:00
Also in:
lkml, netdev
From: Andres Beltran <redacted> Date: Tue, 28 Jul 2020 18:53:21 -0400
For additional robustness in the face of Hyper-V errors or malicious behavior, validate all values that originate from packets that Hyper-V has sent to the guest in the host-to-guest ring buffer. Ensure that invalid values cannot cause indexing off the end of an array, or subvert an existing validation via integer overflow. Ensure that outgoing packets do not have any leftover guest memory that has not been zeroed out. Cc: David S. Miller <davem@davemloft.net> Cc: Jakub Kicinski <kuba@kernel.org> Cc: netdev@vger.kernel.org Signed-off-by: Andres Beltran <redacted>
I need hyperv maintainer reviews before I will apply this. Thank you.