mirror of
https://github.com/cloud-hypervisor/cloud-hypervisor.git
synced 2026-08-05 02:19:16 +00:00
The per-domain mapping cap bounds memory inside one domain, but a guest can still grow the domains map indefinitely with ATTACH requests for distinct domain IDs. Reject ATTACH with VIRTIO_IOMMU_S_NOMEM at 64K domains. Signed-off-by: Rob Bradford <rbradford@meta.com> Assisted-by: Claude:claude-opus-4-7