mirror of
https://github.com/cloud-hypervisor/cloud-hypervisor.git
synced 2026-08-05 02:19:16 +00:00
Domain::mappings only shrinks on UNMAP. Without a bound a guest can issue MAP for arbitrarily many distinct virt_start values and drive the VMM heap until the host runs out. Reject MAP with VIRTIO_IOMMU_S_NOMEM at 1M entries per domain. Signed-off-by: Rob Bradford <rbradford@meta.com> Assisted-by: Claude:claude-opus-4-7