virtio_console: Assure used length from device is limited
authorXie Yongji <xieyongji@bytedance.com>
Tue, 25 May 2021 12:56:22 +0000 (20:56 +0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 20 Jul 2021 14:17:53 +0000 (16:17 +0200)
commit56cf748562d3cbfd33d1ba2eb4a7603a5e20da88
tree691bfd3e067f9575be43cd546deba1845cf2d33c
parent733fd68b0cee23db96b1e153e0e757a4f6ed5281
virtio_console: Assure used length from device is limited

[ Upstream commit d00d8da5869a2608e97cfede094dfc5e11462a46 ]

The buf->len might come from an untrusted device. This
ensures the value would not exceed the size of the buffer
to avoid data corruption or loss.

Signed-off-by: Xie Yongji <xieyongji@bytedance.com>
Acked-by: Jason Wang <jasowang@redhat.com>
Link: https://lore.kernel.org/r/20210525125622.1203-1-xieyongji@bytedance.com
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/char/virtio_console.c