mirror of
https://github.com/cloud-hypervisor/cloud-hypervisor.git
synced 2026-08-05 02:19:16 +00:00
The DmaRemapping translate_gva and translate_gpa entry points discarded the size argument that AccessPlatform's signature already carries and only checked the base address. A buffer beginning inside a mapping but extending past it was treated as fully translated, allowing reads or writes outside the IOMMU-authorized window. Add `size` to the trait, validate the full span fits in a single mapping, and propagate it through AccessPlatformMapping. Signed-off-by: Rob Bradford <rbradford@meta.com> Assisted-by: Claude:claude-opus-4-7