mirror of
https://github.com/cloud-hypervisor/cloud-hypervisor.git
synced 2026-08-05 02:19:16 +00:00
dma_unmap computed `iova + size - 1` unchecked while the sibling dma_map already used checked_add/checked_sub. A guest reaching dma_unmap via VIRTIO_IOMMU_T_UNMAP could cause a panic. Signed-off-by: Dylan Reid <dgreid@fb.com>