Eric Biggers 987d1149be KVM: fix unregistering coalesced mmio zone from wrong bus ... If you register a kvm_coalesced_mmio_zone with '.pio = 0' but then unregister it with '.pio = 1', KVM_UNREGISTER_COALESCED_MMIO will try to unregister it from KVM_PIO_BUS rather than KVM_MMIO_BUS, which is a no-op. But it frees the kvm_coalesced_mmio_dev anyway, causing a use-after-free. Fix it by only unregistering and freeing the zone if the correct value of 'pio' is provided. Reported-by: syzbot+f87f60bb6f13f39b54e3@syzkaller.appspotmail.com Fixes: 0804c849f1 ("kvm/x86 : add coalesced pio support") Signed-off-by: Eric Biggers <ebiggers@google.com> Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>		2018-12-18 22:07:25 +01:00
..
arm	KVM updates for v4.20	2018-10-25 17:57:35 -07:00
async_pf.c	sched/swait: Rename to exclusive	2018-06-20 11:35:56 +02:00
async_pf.h
coalesced_mmio.c	KVM: fix unregistering coalesced mmio zone from wrong bus	2018-12-18 22:07:25 +01:00
coalesced_mmio.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
eventfd.c	Miscellaneous bugfixes, plus a small patchlet related to Spectre v2.	2018-07-18 11:08:44 -07:00
irqchip.c
Kconfig	KVM: arm64: Prevent KVM_COMPAT from being selected	2018-06-21 17:17:50 +01:00
kvm_main.c	Revert "mm, mmu_notifier: annotate mmu notifiers with blockable invalidate callbacks"	2018-10-26 16:25:19 -07:00
vfio.c
vfio.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00