CVSROOT: /cvs Module name: src Changes by: d...@cvs.openbsd.org 2021/08/29 06:17:38
Modified files:
usr.sbin/vmd : virtio.c
Log message:
mask next descriptor value and fix chunk_size calculation
Guest can cause out of bounds read with a malformed descriptor. In same
loop, also fix a chunk size calculation.
Reported by Ilja van Sprundel.
ok mlarkin@
