On Wed, 5 Jun 2013 21:18:37 -0400
Luiz Capitulino wrote:
> The balloon_page_dequeue() function can return NULL. If it does for
> the first page being freed, then leak_balloon() will create a
> scatter list with len=0. Which in turn seems to generate an invalid
> virtio request.
>
> I didn't get
On Wed, 5 Jun 2013 21:18:37 -0400
Luiz Capitulino lcapitul...@redhat.com wrote:
The balloon_page_dequeue() function can return NULL. If it does for
the first page being freed, then leak_balloon() will create a
scatter list with len=0. Which in turn seems to generate an invalid
virtio request.
On Thu, 6 Jun 2013 11:13:58 -0300
Rafael Aquini wrote:
> On Wed, Jun 05, 2013 at 09:18:37PM -0400, Luiz Capitulino wrote:
> > The balloon_page_dequeue() function can return NULL. If it does for
> > the first page being freed, then leak_balloon() will create a
> > scatter list with len=0. Which
On Wed, Jun 05, 2013 at 09:18:37PM -0400, Luiz Capitulino wrote:
> The balloon_page_dequeue() function can return NULL. If it does for
> the first page being freed, then leak_balloon() will create a
> scatter list with len=0. Which in turn seems to generate an invalid
> virtio request.
>
> I
On Wed, Jun 05, 2013 at 09:18:37PM -0400, Luiz Capitulino wrote:
The balloon_page_dequeue() function can return NULL. If it does for
the first page being freed, then leak_balloon() will create a
scatter list with len=0. Which in turn seems to generate an invalid
virtio request.
I didn't get
On Thu, 6 Jun 2013 11:13:58 -0300
Rafael Aquini aqu...@redhat.com wrote:
On Wed, Jun 05, 2013 at 09:18:37PM -0400, Luiz Capitulino wrote:
The balloon_page_dequeue() function can return NULL. If it does for
the first page being freed, then leak_balloon() will create a
scatter list with
The balloon_page_dequeue() function can return NULL. If it does for
the first page being freed, then leak_balloon() will create a
scatter list with len=0. Which in turn seems to generate an invalid
virtio request.
I didn't get this in practice, I found it by code review. On the other
hand, such
The balloon_page_dequeue() function can return NULL. If it does for
the first page being freed, then leak_balloon() will create a
scatter list with len=0. Which in turn seems to generate an invalid
virtio request.
I didn't get this in practice, I found it by code review. On the other
hand, such
8 matches
Mail list logo