|
 |
c1d5388 |
From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
|
|
|
c1d5388 |
From: Hans de Goede <hdegoede@redhat.com>
|
|
|
c1d5388 |
Date: Tue, 19 May 2020 13:23:06 +0200
|
|
|
c1d5388 |
Subject: [PATCH] virt: vbox: Fix guest capabilities mask check
|
|
|
c1d5388 |
|
|
|
c1d5388 |
Check the passed in capabilities against VMMDEV_GUEST_CAPABILITIES_MASK
|
|
|
c1d5388 |
instead of against VMMDEV_EVENT_VALID_EVENT_MASK.
|
|
|
c1d5388 |
This tightens the allowed mask from 0x7ff to 0x7.
|
|
|
c1d5388 |
|
|
|
c1d5388 |
Fixes: 0ba002bc4393 ("virt: Add vboxguest driver for Virtual Box Guest integration")
|
|
|
c1d5388 |
Cc: stable@vger.kernel.org
|
|
|
c1d5388 |
Signed-off-by: Hans de Goede <hdegoede@redhat.com>
|
|
|
c1d5388 |
Upstream Status: https://lore.kernel.org/lkml/20200520195440.38759-1-hdegoede@redhat.com/
|
|
|
c1d5388 |
---
|
|
|
c1d5388 |
drivers/virt/vboxguest/vboxguest_core.c | 2 +-
|
|
|
c1d5388 |
drivers/virt/vboxguest/vmmdev.h | 2 ++
|
|
|
c1d5388 |
2 files changed, 3 insertions(+), 1 deletion(-)
|
|
|
c1d5388 |
|
|
|
c1d5388 |
diff --git a/drivers/virt/vboxguest/vboxguest_core.c b/drivers/virt/vboxguest/vboxguest_core.c
|
|
|
c1d5388 |
index 8fab04e76c14..18ebd7a6af98 100644
|
|
|
c1d5388 |
--- a/drivers/virt/vboxguest/vboxguest_core.c
|
|
|
c1d5388 |
+++ b/drivers/virt/vboxguest/vboxguest_core.c
|
|
|
c1d5388 |
@@ -1444,7 +1444,7 @@ static int vbg_ioctl_change_guest_capabilities(struct vbg_dev *gdev,
|
|
|
c1d5388 |
or_mask = caps->u.in.or_mask;
|
|
|
c1d5388 |
not_mask = caps->u.in.not_mask;
|
|
|
c1d5388 |
|
|
|
c1d5388 |
- if ((or_mask | not_mask) & ~VMMDEV_EVENT_VALID_EVENT_MASK)
|
|
|
c1d5388 |
+ if ((or_mask | not_mask) & ~VMMDEV_GUEST_CAPABILITIES_MASK)
|
|
|
c1d5388 |
return -EINVAL;
|
|
|
c1d5388 |
|
|
|
c1d5388 |
ret = vbg_set_session_capabilities(gdev, session, or_mask, not_mask,
|
|
|
c1d5388 |
diff --git a/drivers/virt/vboxguest/vmmdev.h b/drivers/virt/vboxguest/vmmdev.h
|
|
|
c1d5388 |
index 6337b8d75d96..21f408120e3f 100644
|
|
|
c1d5388 |
--- a/drivers/virt/vboxguest/vmmdev.h
|
|
|
c1d5388 |
+++ b/drivers/virt/vboxguest/vmmdev.h
|
|
|
c1d5388 |
@@ -206,6 +206,8 @@ VMMDEV_ASSERT_SIZE(vmmdev_mask, 24 + 8);
|
|
|
c1d5388 |
* not.
|
|
|
c1d5388 |
*/
|
|
|
c1d5388 |
#define VMMDEV_GUEST_SUPPORTS_GRAPHICS BIT(2)
|
|
|
c1d5388 |
+/* The mask of valid capabilities, for sanity checking. */
|
|
|
c1d5388 |
+#define VMMDEV_GUEST_CAPABILITIES_MASK 0x00000007U
|
|
|
c1d5388 |
|
|
|
c1d5388 |
/** struct vmmdev_hypervisorinfo - Hypervisor info structure. */
|
|
|
c1d5388 |
struct vmmdev_hypervisorinfo {
|
|
|
c1d5388 |
--
|
|
|
c1d5388 |
2.26.2
|
|
|
c1d5388 |
|