]> git.proxmox.com Git - mirror_ubuntu-eoan-kernel.git/commit
KVM: S390: fix potential array overrun in intercept handling
authorChristian Borntraeger <borntraeger@de.ibm.com>
Thu, 21 Jan 2010 11:19:07 +0000 (12:19 +0100)
committerMarcelo Tosatti <mtosatti@redhat.com>
Mon, 25 Jan 2010 14:26:39 +0000 (12:26 -0200)
commit062d5e9b0d714f449b261bb522eadaaf6f00f438
treecd0e9b7e7449a2b067614865998218fd4462e581
parentb6a114d27273c37cd0107b0f49af208168498f05
KVM: S390: fix potential array overrun in intercept handling

kvm_handle_sie_intercept uses a jump table to get the intercept handler
for a SIE intercept. Static code analysis revealed a potential problem:
the intercept_funcs jump table was defined to contain (0x48 >> 2) entries,
but we only checked for code > 0x48 which would cause an off-by-one
array overflow if code == 0x48.

Use the compiler and ARRAY_SIZE to automatically set the limits.

Cc: stable@kernel.org
Signed-off-by: Christian Borntraeger <borntraeger@de.ibm.com>
Signed-off-by: Marcelo Tosatti <mtosatti@redhat.com>
arch/s390/kvm/intercept.c