kata-containers/cloud-hypervisor
1
0
Fork 0
mirror of https://github.com/cloud-hypervisor/cloud-hypervisor.git synced 2026-08-05 02:19:16 +00:00
Code Issues Packages Projects Releases Wiki Activity

block: fix status value size

Browse Source 
As per VirtIO spec 1.2 section 5.2.6, the `status` field is a byte, not
u32. cloud-hypervisor writes an `u32` to guest memory, which
accidentally zeros out the following 3 bytes, and may corrupt guest OS
internal state.

Signed-off-by: Changyuan Lyu <changyuanl@google.com>
This commit is contained in:
Changyuan Lyu
2024-07-12 22:54:12 -07:00
committed by Liu Wei
parent d89f1f4f21
commit bc6acb842f
3 changed files with 7 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
virtio-devices/src/block.rs
View File

@@ -215,7 +215,7 @@ impl BlockEpollHandler {
} else {
desc_chain
.memory()
.write_obj(VIRTIO_BLK_S_OK, request.status_addr)
.write_obj(VIRTIO_BLK_S_OK as u8, request.status_addr)
.map_err(Error::RequestStatus)?;
// If no asynchronous operation has been submitted, we can
@@ -361,7 +361,7 @@ impl BlockEpollHandler {
.write_latency_avg
.store(write_avg, Ordering::Relaxed);
(VIRTIO_BLK_S_OK, result as u32)
(VIRTIO_BLK_S_OK as u8, result as u32)
} else {
error!(
"Request failed: {:x?} {:?}",