From nobody Sat Jul 25 11:30:13 2026 Delivered-To: importer@patchew.org Authentication-Results: mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=qemu-devel-bounces+importer=patchew.org@nongnu.org; arc=pass (i=1 dmarc=pass fromdomain=nutanix.com); dmarc=pass(p=none dis=none) header.from=nutanix.com ARC-Seal: i=2; a=rsa-sha256; t=1784539097; cv=pass; d=zohomail.com; s=zohoarc; b=XFhqYAy4bDC/H8uLPjxP9dVUllHTpjSk/iP9jXfu2wN11zejHlYFD4UYziADzZI/L88BrCIFpWN1QBfqOoJWbDK8pqrOLvy5NnD99Kc0lGpf/SEqiusvrBdR6/+583MR9NrqXm6LLcKz31uW475Y3EIoNDdjG/XA+w053B0PkKM= ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1784539097; h=Content-Type:Content-Transfer-Encoding:Cc:Cc:Date:Date:From:From:In-Reply-To:List-Subscribe:List-Post:List-Id:List-Archive:List-Help:List-Unsubscribe:MIME-Version:Message-ID:References:Sender:Subject:Subject:To:To:Message-Id:Reply-To; bh=79NcBIAvbglnhdB7Igq0lGRbdOWcTtjTIUXC0/yWHFs=; b=Z9tQncSPVR3cY7VrGRztaF2518pDOvUfFV7whO1l8jKfjAH2D9zSyZzaSoo2QTfWoFs1O/n8PBSjkQSmrso9g0SMH3kovkXQsOIGbabDPoy5dwHv/q7I/SRcDMd7p0VAmA9uNTYsXQxPUyBtuQFSFP6K6q+a5TUGJj1jpQGB0wM= ARC-Authentication-Results: i=2; mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=qemu-devel-bounces+importer=patchew.org@nongnu.org; arc=pass (i=1 dmarc=pass fromdomain=nutanix.com); dmarc=pass header.from= (p=none dis=none) Return-Path: Received: from lists1p.gnu.org (lists1p.gnu.org [209.51.188.17]) by mx.zohomail.com with SMTPS id 178453909759787.04776403654296; Mon, 20 Jul 2026 02:18:17 -0700 (PDT) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists1p.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1wlk7z-0002s9-F7; Mon, 20 Jul 2026 05:17:35 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists1p.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1wlk7w-0002rd-3c for qemu-devel@nongnu.org; Mon, 20 Jul 2026 05:17:32 -0400 Received: from mx0a-002c1b01.pphosted.com ([148.163.151.68]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1wlk7t-0007NP-UL for qemu-devel@nongnu.org; Mon, 20 Jul 2026 05:17:31 -0400 Received: from pps.filterd (m0127837.ppops.net [127.0.0.1]) by mx0a-002c1b01.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 66K6SVH63828896; Mon, 20 Jul 2026 02:17:27 -0700 Received: from sn4pr2101cu001.outbound.protection.outlook.com (mail-southcentralusazon11022102.outbound.protection.outlook.com [40.93.195.102]) by mx0a-002c1b01.pphosted.com (PPS) with ESMTPS id 4fg8bdtsw6-1 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT); Mon, 20 Jul 2026 02:17:27 -0700 (PDT) Received: from IA0PR02MB9462.namprd02.prod.outlook.com (2603:10b6:208:406::6) by CH3PR02MB9860.namprd02.prod.outlook.com (2603:10b6:610:17a::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.223.12; Mon, 20 Jul 2026 09:17:25 +0000 Received: from IA0PR02MB9462.namprd02.prod.outlook.com ([fe80::c493:aabb:b834:f53d]) by IA0PR02MB9462.namprd02.prod.outlook.com ([fe80::c493:aabb:b834:f53d%7]) with mapi id 15.21.0223.015; Mon, 20 Jul 2026 09:17:25 +0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nutanix.com; h= cc:content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to; s= proofpoint20171006; bh=79NcBIAvbglnhdB7Igq0lGRbdOWcTtjTIUXC0/yWH Fs=; b=K9IzYQyqd9/pqwDN6L2yqAhhN/j5gFT/rEWke4XKVTm9ljtL9TXM2Q+CG dDjQtAefDLcmqDI0EfX0fQfmZXpw6B3K2hkmRImZvX7YEttNnJ5G5pWDMfVjAbN6 9QoxUFD8adc5KgXMCp4nxPi4UGyrp5EUKtiyC/t03yRfsNUFHKzOQUAiTOwgEUKL gnhbWJSVxPkeebnW90Vz+6BEKYQMSgLgOyQv4Xqe7eO/x5rF99/y/rd5vTuZ3nWj t2DOws3n9TwxseDSGVIHpQidN3PAZy97O6OgcrzyDDu7NX7qm+56JHbyZEEBy6oI CR9Yd3VJZxrmuH37EslZKczsJGBcQ== ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=q+vL5GD3cQ1/M/VuZ991g7rMw2bR2MP42Zd7JKqg8TmcgqA7JUksoFmamHIXdvyx0uHjfFyK+yqLtVR7buoukd/uIm9NlO34pDMRyYpj+0cP0GPcYV09z59M9Eak/wI+0bbQ4tVQj7lwci9hszXeVuk0pTXC/30/oKCouO9b9I8WnCaSabOcLsPeoogREZk1zbbiIy9DwLORfz1yGZdXydduDJqvTyePDGiyMmyNY6Z5PPUZRmxCR1yJZ3OoQiVJFAXSX5H15/JDSIki5ZyGQ5inZJ82+y1VKjxc9oamwviGrEVQyK1RxH/DhshOusBAOoAsQ3jNOSampUHhIE47dA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=79NcBIAvbglnhdB7Igq0lGRbdOWcTtjTIUXC0/yWHFs=; b=mNvcixnjxQ/gMc+IRjyG6KTADtE5Xo5GQISbv/9MQF59iiOxSn8NVIDaeLxyOuEyLxcUtpp9ZjUwPAJ7j7yAUILB+tlHiRv0H13/cifA4L0y1yfmB0fuksEU/MEXsPpW4wgjCcY+LvVd6Oe83zIO6LCJ7jJ196LTqbflSkTiqxTztsom/jNGPYWE7Q1Uwnc/G96TvOUkLdyL2CVvrWAoxjbSSNx61O7uT03dMp92d4j2b9S3IC+MCXAfzCuQHlImIHAnrnIq9RnLbOTEQhayel9K5CylHZJknLF6+ndbrSFwjLSkTfI/RXmpz6AtHTq7gHwpvpG6vkGmEUnIeSyhOA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nutanix.com; dmarc=pass action=none header.from=nutanix.com; dkim=pass header.d=nutanix.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nutanix.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=79NcBIAvbglnhdB7Igq0lGRbdOWcTtjTIUXC0/yWHFs=; b=fst/iAjrn95WCSby/40hWmHxc7moE4JlOlLawRt2Jm2diE7DrkwhSwAVYe/eN5yaJNOqNiLH+AEXMSXqqXnOWzDJfC2e1Owh+D/AxsMVFg5M55yXahrtx7eoYU3lk3xr8RFc4QdJzLUhPHQpzYbVMxuPYljm5ZHTBViCZZ0O0p+KtcZHQ1SFPanChG6PruyYnyHAKqHDjGtGksBRNxB6jnVVjRJ4exoqcU3l6bBarWB0B7tj0ef4H4cIi9PRk0lH0PUatHosThVdzOHHIW0+8C+JHS+lLvEDmaODV6fOXBSrRH6HiVSzLBbmjQ2wOIIbwoYLFfe33J6/MRCdh5JMeg== From: Thanos Makatos To: "qemu-devel@nongnu.org" CC: John Levon , "clg@redhat.com" , Thanos Makatos Subject: [PATCH 1/5] vfio-user: vfio_user_get_region_info: prevent buffer overflow Thread-Topic: [PATCH 1/5] vfio-user: vfio_user_get_region_info: prevent buffer overflow Thread-Index: AQHdGCiUeQzpPGhc9U+w6z3aHy5MpQ== Date: Mon, 20 Jul 2026 09:17:25 +0000 Message-ID: <20260720091718.2642-2-thanos.makatos@nutanix.com> References: <20260720091718.2642-1-thanos.makatos@nutanix.com> In-Reply-To: <20260720091718.2642-1-thanos.makatos@nutanix.com> Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-publictraffictype: Email x-ms-traffictypediagnostic: IA0PR02MB9462:EE_|CH3PR02MB9860:EE_ x-ms-office365-filtering-correlation-id: d475f0eb-66dd-4f71-1364-08dee63fb6c8 x-proofpoint-crosstenant: true x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; ARA:13230040|376014|366016|1800799024|23010399003|38070700021|56012099006|10067099003|18002099003|22082099003; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:IA0PR02MB9462.namprd02.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230040)(376014)(366016)(1800799024)(23010399003)(38070700021)(56012099006)(10067099003)(18002099003)(22082099003); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?iso-8859-1?Q?CPGs9ITNXBiZlrnvLPGbQOzzN+3UoPU1j94FTpgazEGfsUllAxTXAF4iHL?= =?iso-8859-1?Q?hBy8y2U1/oJRAuo47urVoZQ0pvi0sbSDkeKl/e+xqob7RWoMOjbGDqkztA?= =?iso-8859-1?Q?Jge9qaCJbn6MvF9o2U2yXNNCzDHsL41llhmvo9Sc/1u6v6ENDch71iGJV2?= =?iso-8859-1?Q?gBALoaqUv7NZPa+3oRbFMkzKV36/OeMaI6KKWhVSHp04Ju1Pj0S4j0ak7/?= =?iso-8859-1?Q?Nv2288D0jnldbvmlgrDeCEW3k9q25LW7nbaKIbjESpvb/U6hdX7DYzeoUw?= =?iso-8859-1?Q?zHoyBRf7D0HtY5hyv40JpSFWpmtE8TUXPhlOB/YOFWPbnL7yhvqyQhQ4ao?= =?iso-8859-1?Q?P7lIB48/XtX5WxxMzIxQUESij9eawOqd3R8BM23+acB/I+KhHJn0IdBvWU?= =?iso-8859-1?Q?wBvHzwCz9Rgvir3kfrPOwc0wAQ1Iws5Y+1NCniAk++CVu2WwYZBe+K6Gg6?= =?iso-8859-1?Q?Cz2KLH+ngUCJTNI21bI/OHLlg7oFJKp4ynleeEqG59suP7vLUMD3kpBGIu?= =?iso-8859-1?Q?niK0rinQfTb0X+jdMuCI3qdXDiQGcVtzQRPmyTSZ7A/y64NRx1D0fSp93I?= =?iso-8859-1?Q?oDVwrSZorCaMuPTbOST6mVsKqB7gwY4+7/F6OCxu7vSlN9onEW1xcWX3tT?= =?iso-8859-1?Q?JX5aq3VI3NYpAnXD/5lGkSmV215XkWsDnWxqcTdvg9RzlqVHPkVcOiWH7H?= =?iso-8859-1?Q?fuuhzPOoyDJzpcQAaxtB9xFWo96fdWoVSBtcs/IqDCnchE+q1BUYssGORX?= =?iso-8859-1?Q?Z2yK6pM9EXp0OIfs9rXfHhA1P7lL9A++fl0nqkYWWIWfKSQA/0iM82GQlf?= =?iso-8859-1?Q?Nf1MIE2i2Vs5l/XEAc2bgpFbyolGH0mDJPSJS6CKJx5uyX3x+QL0tBQNuY?= =?iso-8859-1?Q?3+OoVB3/SQPbzgj557ztNP7fTZWvXa9e51eL30CWo7L6C8YYm21I85q0FY?= =?iso-8859-1?Q?l79he0FXuMb+bzxScnSWBluuhtnU9Wj16dCxVIXu+FW/WjmlpMeddy3RHN?= =?iso-8859-1?Q?ZYQNakLUSaOCqLYCQHbNdC2ds34qCBBfhSAnhawVMc8wQXw0X7GYEUlzRe?= =?iso-8859-1?Q?wqVVmbBq3bsJPNoCh3n2sX0/t3JO/tpsLcunU670CKUhSPlrUFNdiArYEB?= =?iso-8859-1?Q?bOJf6/1GRk7UFzzaQP39zy7t+khMlmAtiArHunaLh39uexYmbUP6uAIUVY?= =?iso-8859-1?Q?7U343F5L85qIhn7AVQRtFT5Wcpt2NOhuvAVhJoIpX+NRx+2dgMMdRtlYGB?= =?iso-8859-1?Q?pGXSAWmlsLEzUjzDXdxIu04Z28ptn/VS+F6SLluYk/jP2j1OhPyr0GZRgJ?= =?iso-8859-1?Q?RaAjr6bcSDz5+gNtRSfFXpEbGGfwiI2dgiYKb1DQR97XXPFVBypxevGaAQ?= =?iso-8859-1?Q?9kVJaEE+IDASYd2RMMUT1hHlGHJ4VbxZ9jlXOcx2dQs4cB0d/f3TyUdRa4?= =?iso-8859-1?Q?dqjCfEZjI6fPee+ReUyfA/5U+GyRAUkf/QeZMDqiKDWL8pmaXwj0eWN7nn?= =?iso-8859-1?Q?3grHjJZbYVeRcBMyzn39cdmsAoPawmSDQ/h4u4FGrWTeIlqFnB0aJvZKHg?= =?iso-8859-1?Q?Nf16RA5WJtUJOQejCFObq7D5QdkHdm7lmkc4r/Ox+ir8K+wdSNzpvFHmQN?= =?iso-8859-1?Q?qIs94jwVo82UDz3XhbFr13ZFC6Y46/0kJeBuanxPqmfo9Zl/Su4kMUF/kO?= =?iso-8859-1?Q?9438wl3+8z4ky148ZAbsiJbx0l8Gq2FO/gPiB/nbYu7Zf3xsZk/NP9EOvM?= =?iso-8859-1?Q?tXFWAlkos/DrAUb2MN9eBg6oeLnGroF30O/OpJOwnHrcTyPgQNyxlJEKcE?= =?iso-8859-1?Q?E0nBJEfqRbT7X+w6eLsqUYsHzV/BIQM=3D?= Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Exchange-RoutingPolicyChecked: SUJFainNogr8TY+TU99RzgSTPIUAN/ACtb9dUrD20OjeYbhVR9jPdvHEFqrElV9qdioo0TcHnjLVTaUr/jctNh4SGAuckmGzs9T0+qPM8TsPqgiTvKE+80LtKjCKUPpKQD5VWplccxUC7fP2jsqjGRpFy01/FpG9s5I96qPKL80ZPj4mecUJJ+wAVHT3Y/ImOZ/IQP8ysvODrOHKxnNTJp3ZaoIBvLMHUlONApckb81X4xxta6idGe0uoTA8SEJO3IIkGtSnBELKez0rf+kGmA6Z2XItMOF7qoSa9jAGzE8UWB7KnGYDIz/HP3Mwul0HHM2u4BiNG2SqpGwM0zcvVQ== X-OriginatorOrg: nutanix.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: IA0PR02MB9462.namprd02.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: d475f0eb-66dd-4f71-1364-08dee63fb6c8 X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Jul 2026 09:17:25.6969 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bb047546-786f-4de1-bd75-24e5b6f79043 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: NV8QGS63JdctSm3eQtOKS+i5np1N60kqvdu7kImiZzACPck6sL/n81gv3ZYEd+g4mi05kh+rJMwATRJ7eDGaQ+89DEHtpp/sOi8YLpVGxlI= X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH3PR02MB9860 X-Proofpoint-Spam-Details-Enc: AW1haW4tMjYwNzIwMDEwMyBTYWx0ZWRfX4aBqCJMA0GjR 3nArYCNBe1vrcjzFbWKmSJ1KJ/vHPcZLZOeSs5I6DFSzydssLGYRCseb53x5FYVbsY7+Skm7loA FwQuz8fsCqjw1NzuEfJIxOVTZemfgWD4rBEny7MFOmkkwVrbOM7PwLiy7v0ngvh0RiCwmdllUwe jziNeEF4dckDNVbI6kVsrFe2GEZRQZXJTHz42zT5n28MPE7CSjEC9u44JAU5bi0p2p7wqsyjUfK rCsGZXdaVoIZGg1l6G7JC/EXPAbXg5AgK8ZFszgf9MLLDPLQY6IhIVDvnq1HbukTsZ5lHFCYZXp JAkHIepM6afhgE3H9rhi+pcaFhL5+2f4sGoiaDxOyrC6tZfrDKv1PAcLqb2qUB67lw4O2kIw2CL Ycjl6SRfqWXzw0P8E+Okld3L906QSchLJczGB3lkPD+MGFD5Y/NL0MYDf3Z9u06BHNofr4AzDNt 0fyRGWsIFcBIpcW9jHg== X-Proofpoint-Spam-Info: AW1haW4tMjYwNzIwMDEwMyBTYWx0ZWRfX2iRxj0Ki16Sy jMhmqzEhBvD1VK2Y8WGZ3KSAI8520H7etXI+UBXMU9+Td4WO+2mowz5qQPmwGPsILUiRDBO1X5O XYGzRw+wVgt+JJA5bY8uuapNEk/dROI= X-Authority-Analysis: v=2.4 cv=TdamcxQh c=1 sm=1 tr=0 ts=6a5de7a7 cx=c_pps a=wVfAXNSrx9oslCtdZ7LgKA==:117 a=z/mQ4Ysz8XfWz/Q5cLBRGdckG28=:19 a=lCpzRmAYbLLaTzLvsPZ7Mbvzbb8=:19 a=xqWC_Br6kY4A:10 a=8nJEP1OIZ-IA:10 a=RAioF0-LDSMA:10 a=0kUYKlekyDsA:10 a=VkNPw1HP01LnGYTKEx00:22 a=VofLwUrZ8Iiv6rRUPXIb:22 a=Ap8k9tRZuQ82DLYWQqG7:22 a=OO7PBntrVmndeWE3w6kA:9 a=wPNLvfGTeEIA:10 X-Proofpoint-ORIG-GUID: 2sXIBnz4DgVsIhf44Vz45x7z0BrjDGyu X-Proofpoint-GUID: 2sXIBnz4DgVsIhf44Vz45x7z0BrjDGyu X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1143,Hydra:6.1.134,FMLib:17.12.100.49 definitions=2026-07-20_01,2026-07-17_01,2025-10-01_01 X-Proofpoint-Spam-Reason: safe Received-SPF: pass (zohomail.com: domain of gnu.org designates 209.51.188.17 as permitted sender) client-ip=209.51.188.17; envelope-from=qemu-devel-bounces+importer=patchew.org@nongnu.org; helo=lists1p.gnu.org; Received-SPF: pass client-ip=148.163.151.68; envelope-from=thanos.makatos@nutanix.com; helo=mx0a-002c1b01.pphosted.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: qemu-devel@nongnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: qemu development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: qemu-devel-bounces+importer=patchew.org@nongnu.org Sender: qemu-devel-bounces+importer=patchew.org@nongnu.org X-ZohoMail-DKIM: pass (identity @nutanix.com) X-ZM-MESSAGEID: 1784539100466158500 Content-Type: text/plain; charset="utf-8" If the vfio-user responds with a value large enough such that adding the header size to it overflows, a smaller buffer would be inadvertently allocated, leading to buffer overflow. --- hw/vfio-user/device.c | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/hw/vfio-user/device.c b/hw/vfio-user/device.c index b8d2b7c1a8..19a42c2a25 100644 --- a/hw/vfio-user/device.c +++ b/hw/vfio-user/device.c @@ -128,6 +128,16 @@ static int vfio_user_get_region_info(VFIOUserProxy *pr= oxy, error_printf("vfio_user_get_region_info argsz too small\n"); return -E2BIG; } + + /* + * Ensure that size doesn't overflow, otherwise we'll allocate a much + * smaller buffer than we need. + */ + if (__builtin_add_overflow(info->argsz, sizeof(VFIOUserHdr), &size)) { + error_printf("vfio_user_get_region_info argsz too large\n"); + return -E2BIG; + } + if (fds !=3D NULL && fds->send_fds !=3D 0) { error_printf("vfio_user_get_region_info can't send FDs\n"); return -EINVAL; --=20 2.34.1 From nobody Sat Jul 25 11:30:13 2026 Delivered-To: importer@patchew.org Authentication-Results: mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=qemu-devel-bounces+importer=patchew.org@nongnu.org; arc=pass (i=1 dmarc=pass fromdomain=nutanix.com); dmarc=pass(p=none dis=none) header.from=nutanix.com ARC-Seal: i=2; a=rsa-sha256; t=1784539099; cv=pass; d=zohomail.com; s=zohoarc; b=DNMFTyJQPta2VweNJWcivc+mDFq/6siAMU3WNOT0zl6f502vsGHo0zfsJPQCcscspIpbCPiL+hvGkIHOm95s8Gh7tTfJoNEp2FPEC2P2TAyLt00JSj1vdRAOC8Idxv7XVD4yTQnDTbucWIOuqV843RHpNBUBbOLtjGhRZiFDOPc= ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1784539099; h=Content-Type:Content-Transfer-Encoding:Cc:Cc:Date:Date:From:From:In-Reply-To:List-Subscribe:List-Post:List-Id:List-Archive:List-Help:List-Unsubscribe:MIME-Version:Message-ID:References:Sender:Subject:Subject:To:To:Message-Id:Reply-To; bh=PMDwH407eb81MXFVZaE3HknjQMU0lotl8I14J41OwGI=; b=A+L8Rdj8gerVrrp3ATXv0bxJXZ6AH/Pko+rcwQGniVB7GPRaDP9iZMf6e9hax9DPy/RqYRGfmI782PCCtixdFlzg0kv6ttZSKInHtNj/ShRdyX2rMM6SOWcpxaXY0AKxPKU+OMihLIBUYO62hi6PBCCjDCxAFJcLY1nEMK9SxRQ= ARC-Authentication-Results: i=2; mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=qemu-devel-bounces+importer=patchew.org@nongnu.org; arc=pass (i=1 dmarc=pass fromdomain=nutanix.com); dmarc=pass header.from= (p=none dis=none) Return-Path: Received: from lists1p.gnu.org (lists1p.gnu.org [209.51.188.17]) by mx.zohomail.com with SMTPS id 1784539099794321.21603229901507; Mon, 20 Jul 2026 02:18:19 -0700 (PDT) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists1p.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1wlk80-0002sf-Js; Mon, 20 Jul 2026 05:17:36 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists1p.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1wlk7x-0002rz-6x for qemu-devel@nongnu.org; Mon, 20 Jul 2026 05:17:33 -0400 Received: from mx0a-002c1b01.pphosted.com ([148.163.151.68]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1wlk7u-0007Na-Ft for qemu-devel@nongnu.org; Mon, 20 Jul 2026 05:17:32 -0400 Received: from pps.filterd (m0127839.ppops.net [127.0.0.1]) by mx0a-002c1b01.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 66K6T08N3733944; Mon, 20 Jul 2026 02:17:29 -0700 Received: from sn4pr2101cu001.outbound.protection.outlook.com (mail-southcentralusazon11022106.outbound.protection.outlook.com [40.93.195.106]) by mx0a-002c1b01.pphosted.com (PPS) with ESMTPS id 4fg8jctsh3-1 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT); Mon, 20 Jul 2026 02:17:28 -0700 (PDT) Received: from IA0PR02MB9462.namprd02.prod.outlook.com (2603:10b6:208:406::6) by CH3PR02MB9860.namprd02.prod.outlook.com (2603:10b6:610:17a::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.223.12; Mon, 20 Jul 2026 09:17:27 +0000 Received: from IA0PR02MB9462.namprd02.prod.outlook.com ([fe80::c493:aabb:b834:f53d]) by IA0PR02MB9462.namprd02.prod.outlook.com ([fe80::c493:aabb:b834:f53d%7]) with mapi id 15.21.0223.015; Mon, 20 Jul 2026 09:17:27 +0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nutanix.com; h= cc:content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to; s= proofpoint20171006; bh=PMDwH407eb81MXFVZaE3HknjQMU0lotl8I14J41Ow GI=; b=hZU1K1aiRa/2wUBlL7OijarNOGEp4+GyDl6NPkhZ80pWHWfMRbR3hOfwr LUBUCsfNGa6cLyl20LrcfxU4M4VwrcmSH4zH08jTqzsqLOGLEueLVlmG2honXNTU 6GPszq+MFqTZiSerp36TYzphRMx/k1NzUbW6sMWFvhUmj5OGeLltfxHJBT5Lr+L/ NIZEYrZL7lUm1HSzBlstCr8okWgNSrflNEVyrQq8S/vhcbHUg17MoF2ddPjzV70+ hvr9RUjl6BvWWJz9QmTpvcATXsZLIzsAm5LSKw6ZELF8vJWSZH9tZB9QJqAm996p LoEekpXgCCVhF/l8wlAIpl3uLkEAA== ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=sxwFRKygW2e3fHqfs1noIc3WImAKteSQLHUZsFYJvixAi0LqR1LOBFtSwrEZPUcYafnz/E4Mze2Weo9CFx6T6ut3FuyJmATeplIfYArFXAXI6GyZf2X6immlu/yL9jI+kPkbIYIqp/6dqBHAZk6z6Cv+OLEPOKzu8TlHmG7iOsFjcLHhWuhuKvA1tt8Dsg/c/8TNioxOoQO5VJwfW6l5aOZ9AHA9naW0W3/+gXORUh3HLnoqvxZGtoxcPcuoc48DK0mY3KiLu1PY6rwHncK1uiqPS3D31Vhxdr3Ogb4xzTmyL6mV/7Suy822uO3Xqswt11NLI88B7dVoA0jf/GcZXQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=PMDwH407eb81MXFVZaE3HknjQMU0lotl8I14J41OwGI=; b=aDlP354PM4QfrokfW81CuRNX8JovKlu0EkgG+U8OfnF9SqO+637xvQNN/FHxFeILWF7IMOLJn/jKPxhuGFK4WBbsWiMjPaI39Arda61OfJXLrYT65uOmGH8Rlyr9F3M80uaSZ1WozdJUWQuclKd6cdjlzmAukihbEvvIenMeMF1KpFwOZIx8kGQUbvBgbXxwf8JxINb4mbvPbFGGvs/4N5Ab6TiRcg9gCv/oVcSDjcTm1aS9wlDQtQqi6ieOmqMaNqKI3pu6H2yEcCfsfDqwL28DPRjCuL1u6tQUhF/Rndl30S7blrxpNlE5ah1/WQheblBkDm3uZVzBF5SndD8KGg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nutanix.com; dmarc=pass action=none header.from=nutanix.com; dkim=pass header.d=nutanix.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nutanix.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=PMDwH407eb81MXFVZaE3HknjQMU0lotl8I14J41OwGI=; b=nl7ihes7oIqxaFzyOI6v1E/rGlTNce6AbQoMYJIKd9+O4CkajFElH5YIMZa5AB96rvZaFn0H8WucdnxIpzN+HJ0Q3e7VwHTZhLRReI9Hp3tAz+lblAW3Hf/izuEe3K1pk7P8fyZ/hU39Tf8IU9fgqbc9cBGQDeVmjetr/2K5cP1VhtpAcrCOXbm5kN+eIxns1jokqCeTxacBHRPRRbnpgGr3pGN5n2+bfKU/4n1V6OO/4+c/JiAhnr62jd7zIpCpa+0i5dvoosmq/9IIJ3wx5b2J+ZCQKy+hWaN5/1KgCFtOGPu3wTU+ED3z43OpGduA52Ne1L1/nceEO6zuvm3i2w== From: Thanos Makatos To: "qemu-devel@nongnu.org" CC: John Levon , "clg@redhat.com" , Thanos Makatos Subject: [PATCH 2/5] vfio-user: vfio_user_get_region_info: respect max_xfer_size Thread-Topic: [PATCH 2/5] vfio-user: vfio_user_get_region_info: respect max_xfer_size Thread-Index: AQHdGCiVa5g27BcKgESg+BylswLh7A== Date: Mon, 20 Jul 2026 09:17:27 +0000 Message-ID: <20260720091718.2642-3-thanos.makatos@nutanix.com> References: <20260720091718.2642-1-thanos.makatos@nutanix.com> In-Reply-To: <20260720091718.2642-1-thanos.makatos@nutanix.com> Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-publictraffictype: Email x-ms-traffictypediagnostic: IA0PR02MB9462:EE_|CH3PR02MB9860:EE_ x-ms-office365-filtering-correlation-id: 7a610e1c-a86b-47dc-b13a-08dee63fb7d5 x-proofpoint-crosstenant: true x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; ARA:13230040|376014|366016|1800799024|23010399003|38070700021|56012099006|10067099003|18002099003|22082099003; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:IA0PR02MB9462.namprd02.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230040)(376014)(366016)(1800799024)(23010399003)(38070700021)(56012099006)(10067099003)(18002099003)(22082099003); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?iso-8859-1?Q?eInw8Xs1Ypg3dK66pxffBlKna6tZJoWDhB9Jdto8JJl3FM5pdzfT9GveRq?= =?iso-8859-1?Q?WmwawguMQRSqOTxwtcrUFEexasL7LRCBbQ0BHS7Gw3apTEt6RoQusdQ6OD?= =?iso-8859-1?Q?eN7Ln/8YvlghwmwAPKLxBEAsEtx3PvcRGX3lXWMFQsyXoXENX+bU4WwOaR?= =?iso-8859-1?Q?WLqWEBy22ebGQP5U/RXXn77eiw+C8DpQMiK99V/R8a8XqPjOJf69cXVPcs?= =?iso-8859-1?Q?efZxWWxXhZgQooNYoTdUCgcJ1scm/7vdvwaGRyGyLKoHZDji9rXS7zyxW5?= =?iso-8859-1?Q?afPuOBdrKj/vT8Zhg6fUMss5Hp9qRC3wv1tJ1drhvVUoqqU5z5Gcj7r7sB?= =?iso-8859-1?Q?q0VcoMTEnGsoO5aVAbUsLh4Zb3DSAKZ3C6+hprMEcloPCJBL56lhezCr2b?= =?iso-8859-1?Q?Yl0GVYaND4vqprLWs+FHQlqei4U/f6/txh7oJDExzlXeLMyOLUvplNQboA?= =?iso-8859-1?Q?odIEO7mQM3WKit7sFhfuvlbA0hLU0pUod1IWC/Wzm2hhVfQaak1NOyJYCH?= =?iso-8859-1?Q?8QQc0GQ1JV2ia4BFQIjUqiRGxkGwiPv+GJYApvc72utVAe/nF1wrPUJVxp?= =?iso-8859-1?Q?+8bf1SwfSBySO3eM5FpXnT0wUXSOb/8zYIOwZkzAlcQUNaUzl8uteSfCA/?= =?iso-8859-1?Q?yREJZtmuuZDK5qqWoPjuJpiOp9WiCydvb/4Z+1edQ9aaGpSajOwLuJsBZB?= =?iso-8859-1?Q?F8aE6mBpedUlmmrmq2cr1gU6BfjNz11ZYDH/HNd2AZbXpN4KxBYHaFLW7a?= =?iso-8859-1?Q?QsxgyYWQ4bFxuIgm+OV/EgKfTi8kH+tDp0WB4SUm7isUEzvr/Djzo4uDQk?= =?iso-8859-1?Q?xD5+wf/CSE+2zGD6M9iWPjN9t9KJgOocZOsIunwgfjhe0eAmU42S8EXG/e?= =?iso-8859-1?Q?RPthKvrjY0RUsjW6nW+Fsy+DVdvbRhsqjuTau0IJ0GznkOeAlRGtkCQ8D7?= =?iso-8859-1?Q?yw4ufrFsIXbDuI5NlTA4WNJhjnIeTww7QgXIbFBlAQWMZlpYfENz+RLgUe?= =?iso-8859-1?Q?OBEG3rQmnbxvXKSuSl6TzHqY+38OdC9wyK2mKJHuqU+S8lALCnf0MyRblr?= =?iso-8859-1?Q?lPgzA2bz9Rwtr8e5jnZ7/rI5qfvAzLHWpdWcbvyP5RSH//3LgvuyU3BKlN?= =?iso-8859-1?Q?8pw00EeKEeVL9UI+dOXc101TYDd5utdiYCQ4Zxq0dBC+mCSNN3iSdnIEiM?= =?iso-8859-1?Q?x+9qB/FLx59N0BVdlj3X09yprwrwz1SbEZU/BcX8fKI+mG6RuKtT0lSztX?= =?iso-8859-1?Q?K29sCWeGnIDuT/KTwf5DMPWBzcqAxWRh/sK23aD17O1t2Oxp+zP5iOfVFa?= =?iso-8859-1?Q?xSA3k9qptwWa8KOGf2NRA/mSkGY/IN4ywUdQes/tdY0sNnBXUjTh+tn0ok?= =?iso-8859-1?Q?qim19FdaX3ec06BbV78SCIFQnYhB1dj2hS5WfEiKyWMSOj2OlCC6nGj8zT?= =?iso-8859-1?Q?ffO124JpNMlvcp4P2utzuZFzwBULM4VIrh3vVUdThJaE5Vvkyjxl3aCA7w?= =?iso-8859-1?Q?LTvdbBGbeZbywmZ3INvi+NwGulKIakbcbLcfStP9xhzoSS/LbSYKItEMHO?= =?iso-8859-1?Q?mjWRRtOIOIfXgLc9OzZjl8+29+13NLboS57Hini1h+izE8OqS69Lk236Q6?= =?iso-8859-1?Q?Y7UsM5ZfDXqLApHJ0R5FjYpL/xSVpbBTIqZXczOaByIGZ20C7FvOkWHhG1?= =?iso-8859-1?Q?gSkFIF8aGlW54GB74UFSx75xvQqPOtfGAcf+XoK3JChCrGcKh6Peo2cL3x?= =?iso-8859-1?Q?t/P2PZNBWksl59dm4fF5TE1zUbo28grZ4/piwHTtfij5i21VCFjuR5CR9a?= =?iso-8859-1?Q?gbEOig/uVhtSPsP2ZtzZkUFimsooKvY=3D?= Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Exchange-RoutingPolicyChecked: qNFkFsriSpDBCEDjMHTO4y449IIdkguUakLlJSaOIexuBjPN8KBzoSdGourIg1HcUVd+dGapkL8msWwc+zoMJ2HgpX9cXlrm5dRC77jVdmAPS4xgad0dpXlZqwy6zSV8uJRBUdXeiwkLrR4hSaWyZVC9hzNiokL2cqZlY3vkSmoN9joJTXVNyXAiZKw6AOUbIpgHAyV+4PbL2T5GeykeVZ39xmn3BY2mWnYWDJNpN1kHWa3EpIv9MlVKpxThXpks122SL90r+CKTIXfCeqP8xlwfT5BemxdQdZeHTwJj1USDSnFG4KpdpaU2QechqK+QObIZp3qp1mBGIVlJzW7n0g== X-OriginatorOrg: nutanix.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: IA0PR02MB9462.namprd02.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 7a610e1c-a86b-47dc-b13a-08dee63fb7d5 X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Jul 2026 09:17:27.4148 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bb047546-786f-4de1-bd75-24e5b6f79043 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: wejxCeeDWP+MBClhxB+Jn5rE/7GuujsEvnynu3nWsdrCyRsazX6WayWMo0djnYKtYvGUMlSKf9RNvHvtPhd87RN7voD/6IRPbPXv8VryHlY= X-MS-Exchange-Transport-CrossTenantHeadersStamped: CH3PR02MB9860 X-Proofpoint-ORIG-GUID: KlNL2k4Ss4Szq2SQGQ7BUxPgiIPCNAZm X-Proofpoint-Spam-Info: AW1haW4tMjYwNzIwMDEwMyBTYWx0ZWRfXwJLDCKvaDeL5 81gJaYW5gPaZfjpyr/3DOFOMgeELwppHq2hQSqSVKzZpEETlGeO5DxeGBwnKCoirWuUb0wd8K3z 9yZoAHMkdwySuTG+fcXcTriynkQwTnQ= X-Authority-Analysis: v=2.4 cv=R6Yz39RX c=1 sm=1 tr=0 ts=6a5de7a8 cx=c_pps a=njBiJbAQTUgP4Zm4Bb3rbQ==:117 a=z/mQ4Ysz8XfWz/Q5cLBRGdckG28=:19 a=lCpzRmAYbLLaTzLvsPZ7Mbvzbb8=:19 a=xqWC_Br6kY4A:10 a=8nJEP1OIZ-IA:10 a=RAioF0-LDSMA:10 a=0kUYKlekyDsA:10 a=VkNPw1HP01LnGYTKEx00:22 a=VofLwUrZ8Iiv6rRUPXIb:22 a=y4UcunY2MAxhM4LwGdWI:22 a=64Cc0HZtAAAA:8 a=H0gwBzo8t0bp_Z0icpIA:9 a=wPNLvfGTeEIA:10 X-Proofpoint-GUID: KlNL2k4Ss4Szq2SQGQ7BUxPgiIPCNAZm X-Proofpoint-Spam-Details-Enc: AW1haW4tMjYwNzIwMDEwMyBTYWx0ZWRfX1vvqtONIVN8J 4fv057NfDYlxmefGvZNUL5Dj+DEHGx2hWNy7thtH5Izb23gIdRQmYAWKHlJTnhVofi5sRk/l0OH tAK3JLNFvClwNZDUovGq9aJG4y0L+QaFBjaC7/qUXR2RFmXTwr880StFK7rohZOuPg0dxBc5+pt 0mQjW88SbB/FgJV2rewHxFtrlKJYBdmbOuVfiovozFJ0jdHwZP5vxr/EKWNURyPbtLs6VEEBG+3 BLPYuBY/pd0xj/EU4Hg61jNc+/t0nehXL1Ma7D4FMoi1tiJ9NDXYraR8Q+I8dRGcDnLLyaAKNuS T/iP7LDSMEUsVvrCX0QqPaVR0zYKgkCW4K0v8c2KGqn0j9CERPvbMRQFebjvGO3Mnpg4XNKxOBQ MLR73LKmSkcNMAzmwub2IWbmz0xSODHX/M0jklmXgn/vraScJFA+yGTzO0ww0yZCSzOLk+Idv89 gJq5MCKgSblhGObDS3A== X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1143,Hydra:6.1.134,FMLib:17.12.100.49 definitions=2026-07-20_01,2026-07-17_01,2025-10-01_01 X-Proofpoint-Spam-Reason: safe Received-SPF: pass (zohomail.com: domain of gnu.org designates 209.51.188.17 as permitted sender) client-ip=209.51.188.17; envelope-from=qemu-devel-bounces+importer=patchew.org@nongnu.org; helo=lists1p.gnu.org; Received-SPF: pass client-ip=148.163.151.68; envelope-from=thanos.makatos@nutanix.com; helo=mx0a-002c1b01.pphosted.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: qemu-devel@nongnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: qemu development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: qemu-devel-bounces+importer=patchew.org@nongnu.org Sender: qemu-devel-bounces+importer=patchew.org@nongnu.org X-ZohoMail-DKIM: pass (identity @nutanix.com) X-ZM-MESSAGEID: 1784539100446158500 Content-Type: text/plain; charset="utf-8" Signed-off-by: Thanos Makatos --- hw/vfio-user/device.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/hw/vfio-user/device.c b/hw/vfio-user/device.c index 19a42c2a25..201bf34c8b 100644 --- a/hw/vfio-user/device.c +++ b/hw/vfio-user/device.c @@ -137,6 +137,10 @@ static int vfio_user_get_region_info(VFIOUserProxy *pr= oxy, error_printf("vfio_user_get_region_info argsz too large\n"); return -E2BIG; } + if (size > proxy->max_xfer_size) { + error_printf("vfio_user_get_region_info argsz too large\n"); + return -E2BIG; + } =20 if (fds !=3D NULL && fds->send_fds !=3D 0) { error_printf("vfio_user_get_region_info can't send FDs\n"); --=20 2.34.1 From nobody Sat Jul 25 11:30:13 2026 Delivered-To: importer@patchew.org Authentication-Results: mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=qemu-devel-bounces+importer=patchew.org@nongnu.org; arc=pass (i=1 dmarc=pass fromdomain=nutanix.com); dmarc=pass(p=none dis=none) header.from=nutanix.com ARC-Seal: i=2; a=rsa-sha256; t=1784539111; cv=pass; d=zohomail.com; s=zohoarc; b=DbsFlr4qx+q9+L+I1X6dQhTxwmK5CaHmuE7LglG3ARWJHDvg7DhWD76kUvXl9oVZ2p2BXIsgirLKraiOLZ1rjRc9BKiUD20nK167Z6HepneuZl11KDJkU4CZyD8Dx6j5VW2jmfYlPSTGJf+8oxWTxL3JWsghYPndA4vSul13d60= ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1784539111; h=Content-Type:Content-Transfer-Encoding:Cc:Cc:Date:Date:From:From:In-Reply-To:List-Subscribe:List-Post:List-Id:List-Archive:List-Help:List-Unsubscribe:MIME-Version:Message-ID:References:Sender:Subject:Subject:To:To:Message-Id:Reply-To; bh=weyQGnPK6dFGhfxKxx6oUxQWCwM+m21Evf4fHX24xtg=; b=c6EUvAxOwAPr1iHFwan3ksY04Q1v2CVDhZAR8Oh0OFNqkjvcMXKBN1zPGTr11eYgqyu4JeXgZq4wRbyPKVKbJbAWMLFew99uANtfn3v/bdrC4sQBwxDgyyWFK1/CkChurKx0b/Xhq2TOsTbmjychd/uq0V+QCa8M7A9BN+v+D4I= ARC-Authentication-Results: i=2; mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=qemu-devel-bounces+importer=patchew.org@nongnu.org; arc=pass (i=1 dmarc=pass fromdomain=nutanix.com); dmarc=pass header.from= (p=none dis=none) Return-Path: Received: from lists1p.gnu.org (lists1p.gnu.org [209.51.188.17]) by mx.zohomail.com with SMTPS id 1784539111834987.1173292497185; Mon, 20 Jul 2026 02:18:31 -0700 (PDT) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists1p.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1wlk82-0002tx-3m; Mon, 20 Jul 2026 05:17:38 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists1p.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1wlk7y-0002sG-SD for qemu-devel@nongnu.org; Mon, 20 Jul 2026 05:17:35 -0400 Received: from mx0b-002c1b01.pphosted.com ([148.163.155.12]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1wlk7x-0007R6-BY for qemu-devel@nongnu.org; Mon, 20 Jul 2026 05:17:34 -0400 Received: from pps.filterd (m0127844.ppops.net [127.0.0.1]) by mx0b-002c1b01.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 66K6SEG73770183; Mon, 20 Jul 2026 02:17:32 -0700 Received: from byapr05cu005.outbound.protection.outlook.com (mail-westusazon11020125.outbound.protection.outlook.com [52.101.85.125]) by mx0b-002c1b01.pphosted.com (PPS) with ESMTPS id 4fg90xaqus-1 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT); Mon, 20 Jul 2026 02:17:32 -0700 (PDT) Received: from IA0PR02MB9462.namprd02.prod.outlook.com (2603:10b6:208:406::6) by DSVPR02MB12010.namprd02.prod.outlook.com (2603:10b6:8:41d::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.223.18; Mon, 20 Jul 2026 09:17:29 +0000 Received: from IA0PR02MB9462.namprd02.prod.outlook.com ([fe80::c493:aabb:b834:f53d]) by IA0PR02MB9462.namprd02.prod.outlook.com ([fe80::c493:aabb:b834:f53d%7]) with mapi id 15.21.0223.015; Mon, 20 Jul 2026 09:17:29 +0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nutanix.com; h= cc:content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to; s= proofpoint20171006; bh=weyQGnPK6dFGhfxKxx6oUxQWCwM+m21Evf4fHX24x tg=; b=jQcjtHprBAY7D+pQcuulAnVvmJCjaHQY8XL0mHq6ehgXEsTwp+57iApJy z7DOtej9GiAm2d86Ej7f2ezHgc0NfNHgWa5HP73joAWoFm8R7mGVeGwhTME3Vzx7 l1hEG0Tq4faXZwDzkwXiCX/yGUBqLD40DbD6Au73vcXUv1Nz0cazTHEnbLmNz8b0 uemYsO4+am1hRkHuFVxqaNriEuksOE9Zxwc9S7CV+/yZZFbCygdjN16HZna//K+E P0nG//SeD6PuUBt8hclYLZKU4iIDl8Q6GvEzrNiTko/uOq3lR7K8Hj3RbMFrmbDr 3b4a0jCQFJm/3i4ghrq6148piV1IQ== ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=xO6DHaRc7alL1oOuC/kQHEF8c2NcZkNVFRk/uld/EPPH3TRZOVEwm3wXAsL9OQCodCax6r9cl7azheWGfiJnmy/oxqA1kKXyP845uq3ihYxYzRzh3cdE1ufN0qjE83c/yFF/PLwcIcIaN5f3ETqPieMOCu5DhRnaqc047JItH0y2UggXY2e8YwVGrPzsFq1LvjSF6/b0GIsBB/VMu1BHeCXCEcc9zlUkYwYs7lxfVN/91vAMzMeOaQTdRJiUcuD7kYgRbviql9eK0BOTMqwX/yByoIBDggmtX7DiHWOc/KIHBraam6nE7EluN2b/qJBUuyU0mVit0Avy/dNy3Mo50g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=weyQGnPK6dFGhfxKxx6oUxQWCwM+m21Evf4fHX24xtg=; b=AmLF7v8+8mVrYYsrkNAYZ15A9ocqbVa10SlMeS1J3rd3AkhVkKLaAzTV9H1QeQQc0Nm1VCMcE86TLe91Vdn2bdGyeCRIpQ27nPPqIvX4gPRMEXnDPQqszmkw6DgaODTFAq8EK2eVug2YU4flvhnjcGKpEGYsw6IURPLKM/EbdANn2IhQaxP4OykDQPP2hbFCUnE6FrFNQpjLrUwtVFX3kO5TiOi5nQaPNgpm6yZewkNIgJLOzMCXThm1OnYpu6fg0p2Dt0wgrYKtW13hWjaOa9dSrEkd6oOZehQhqh2ktsNZ4/4qzx7nZT4lVRZaRszF1bxNJmH2wDo/WGEFqo1bdg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nutanix.com; dmarc=pass action=none header.from=nutanix.com; dkim=pass header.d=nutanix.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nutanix.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=weyQGnPK6dFGhfxKxx6oUxQWCwM+m21Evf4fHX24xtg=; b=IRNjcCvVnc9XHJnC2b5PSlLLh3GzMNYlSoPKZCkW+1Aiv0cHMem53dU724fiSkmhbBT5s07PUcuFOzJMQeeVBEqVXS3QDOzfb+uxxNeQR9aSDhY9dy6c6AQz3t911LHjluZvmP5/A4oKk9pYMs36pVUE08YzMfKWgfimWrc+aW0KQd2gdmZF4g2Nggd/cCm4XJFifCaYEHhqkkiiFk44FJWZOqxzKEewthOhazTohohJZb09zHtYmXDTN8OszDtYWDkzUQPtwkLNFcT8Y1eFlQSt/sJ8UhlZ6kBJwdkx2KfcK74DwrdMav+O8MEbTsiAZmu6ZhAda/fC7/sJP/BmLQ== From: Thanos Makatos To: "qemu-devel@nongnu.org" CC: John Levon , "clg@redhat.com" , Thanos Makatos Subject: [PATCH 3/5] vfio-user: vfio_user_get_region_info: reject unreasonably short struct Thread-Topic: [PATCH 3/5] vfio-user: vfio_user_get_region_info: reject unreasonably short struct Thread-Index: AQHdGCiWBAVbTpT3BEif/DTrR372ig== Date: Mon, 20 Jul 2026 09:17:28 +0000 Message-ID: <20260720091718.2642-4-thanos.makatos@nutanix.com> References: <20260720091718.2642-1-thanos.makatos@nutanix.com> In-Reply-To: <20260720091718.2642-1-thanos.makatos@nutanix.com> Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-publictraffictype: Email x-ms-traffictypediagnostic: IA0PR02MB9462:EE_|DSVPR02MB12010:EE_ x-ms-office365-filtering-correlation-id: 76f26ba7-9293-45f6-1cc1-08dee63fb8d5 x-proofpoint-crosstenant: true x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; ARA:13230040|366016|23010399003|1800799024|376014|10067099003|56012099006|18002099003|22082099003|38070700021; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:IA0PR02MB9462.namprd02.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230040)(366016)(23010399003)(1800799024)(376014)(10067099003)(56012099006)(18002099003)(22082099003)(38070700021); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?iso-8859-1?Q?m77uD0Y434olHl6mu6suk0ms0MkG07jLnYQk/IRtoXROMg+xC8/QF+pTei?= =?iso-8859-1?Q?AbBb0tGC44oZZDLbRH2iRsRzxIvn2uhKK37yhOpfZT/629JfO6CpcZUhp3?= =?iso-8859-1?Q?nRTW65xt+/QG6xjxjVjirXnIhXfAoaFuhVkzuasufx0quMDWdp+HxO5u9O?= =?iso-8859-1?Q?XVm4YzAazT5wBmVtGs9Wld6FL+edMt5N8gov5KrDCe3vu5RMBDYZiLEYur?= =?iso-8859-1?Q?y0dVjGPsLTYRvtyqxDWLj6C2XvNTuqq89Rs114xfYj7NX5882pKth8td5P?= =?iso-8859-1?Q?UWyOjNEYlb3vIezsZwRvahwYeywz29/hYD3SfAxqN+Yu4jSzfneZvp/YgR?= =?iso-8859-1?Q?eUVzmmQDx9VaztegEWMMyQNs3h3OZIp6fpf07uT9y0+1nT8TBYVg8P9aYR?= =?iso-8859-1?Q?6oJPb06bsthBPG0wHqWGs2OP414L/66YOWBWcz7aYzqsvycozGhZahgshi?= =?iso-8859-1?Q?1ILXIgFEUypo6WmdQDV4HgDWwxuS6h+MDruDyHMlMwy9ya9sHxejWpaN/a?= =?iso-8859-1?Q?N35rsv9g0ApZuy++Xtbj8hwJf0B3BPigKoWafAhxUWlpuGwjk6S0GUEhUM?= =?iso-8859-1?Q?EM12fHdUqsKDgIzVbaVHxnkxejrH++eVhyyHhzrGiwzxCuI6YA1DlCIUVe?= =?iso-8859-1?Q?aCqmXwQHDmxAZvxJGF0GwAEqcarM3f1zoW6u5BX4jNBpaOkHWxIKwaqNAu?= =?iso-8859-1?Q?9WNlHCSRED2hMkhBsAiusbRXLZygLWXwEEJlmQmj/6cEm1e/VvKaKN1x99?= =?iso-8859-1?Q?EBTmUTE1d0tv8TivoVM3YljhqntjtDwMu4gmbCM0v9rIGZDUBnncS5BwD4?= =?iso-8859-1?Q?cas0eNhu9de+ub8yppdGrOcF9BnJoOXbECgWHgR9ptFJzSGEZQVQyUiD/y?= =?iso-8859-1?Q?YKtZrpXyNBknOrny0Kc0ZcHtlT2+UwygfncO5P7Y67660WJVJrZD6XiYYW?= =?iso-8859-1?Q?wn4T/o1l0yD3y6Mhys7Ajaj2i8s5Po/nSW6QB3osMT5Y01ONHuGF47jfmP?= =?iso-8859-1?Q?3WaKl3AREQvwCLi/C93MkyiuKNKcuOMOc16bja+lfqVpdeCbBatKLHff0b?= =?iso-8859-1?Q?zqZw+ZyvFN29gPalCMasshNTJYPOGLaC9YwSQmsEFpkrkukdIotegzk8jP?= =?iso-8859-1?Q?Z8Np7ZuzFJnAziosCV+pm1lDjtES4EQQE9s0Y/iiNOF4FYdun5enO4VyWy?= =?iso-8859-1?Q?2bC4OseaJQi+1lWrCK7tDFZF7J434YamaqEoJXoBR6M2XH82XL8lUAdDCv?= =?iso-8859-1?Q?e/1IT91MRBThCfhkfZMIelYx+SP39cWVUx0XF4mV0nyOTKPf8KCvNcZS2B?= =?iso-8859-1?Q?tX3qpEQjdrZDHJjtofP2mkinaxV4pHHEg6L2fbdDPpEmJ025TwgAOknxnj?= =?iso-8859-1?Q?8mN+aR9bsXvEDdquIEwEcmH8H2lR8s7YqqcFCz2xVnDkTpSqhJkT0JM3mV?= =?iso-8859-1?Q?fF76Gw6JSop1SqUkZ5A2QuFb4SbPfn9PK6bPurT4HI2QQMiAL0URFfU8Gs?= =?iso-8859-1?Q?HY+pWCah8bBdHT8FeRY50VrisBfwl+shqMsbobu8NIBi7iAzq+rpgwB63o?= =?iso-8859-1?Q?DIJsv5q2GEQjMZRwjgx66MGUZpn7KooYcTH3Ef5lMTzmeE6QzIHU5nXlYZ?= =?iso-8859-1?Q?BLvKOnqc4kg3s23965QILfluBk4sEZSmeJLPhS5MLa9iiKiHGSmwMMcj/5?= =?iso-8859-1?Q?A6k646X6Ohz3arctSvt6+fZGcz0BNHtK3tSt/tBVSQCjAUFXTACjyk18bO?= =?iso-8859-1?Q?jtTZ3zizlV6IUA0a7MI0EnWTvmFjAvXhFMK0EjJNa1nO+uqo2iC8K0LNzi?= =?iso-8859-1?Q?2YPwM4GEwjx4SkP5XE6rrW5F3aHZxQg=3D?= Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Exchange-RoutingPolicyChecked: rWFSKlnKjbwygpV9KtEI8uYIzl3a6uGVlTJsG2qrdSnFv6NQr8ysDMlaEWlhfoowo/E96qBgUZNOR+wDJ8z1FYdjpqQAjsIXlM+SXmG1YE7SS04O4Ww8BYL62cmuqxfsF6g56rQV7NoNJFF8/2B+e4Y3exMW3wN7wouj9ghiOtGVm8/SQGBBNp8Xr5z/wu191M7cbkCvnMhu8WuDFihN8M8bSUcTlTh0egzjFolXpf8HBUKN/aQNNg4qxULhN0/NLcw6o/ZKrBq27vZIHts/1qJuMBBzMh5Li0Um3kuXYe9aGr0HMX0/PWkT3xOLknBE8cVWrBZ8l3Jb9QAmcjO4jw== X-OriginatorOrg: nutanix.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: IA0PR02MB9462.namprd02.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 76f26ba7-9293-45f6-1cc1-08dee63fb8d5 X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Jul 2026 09:17:29.0338 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bb047546-786f-4de1-bd75-24e5b6f79043 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: xMQKIU4wCLEfFAk/lRC0Rcc3HOggC9S/8pG0voSmfM2+4Zu/omtA13fygx303w9DHi5kxgtdhw10sS5YpTAp2duT/cCSpZff4+iO0k1rddM= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DSVPR02MB12010 X-Proofpoint-Spam-Info: AW1haW4tMjYwNzIwMDEwMyBTYWx0ZWRfX/Cf56/6nBllZ KgsFPps9XmrpKJuwP6TmLGZsQBbxtStnybm4wAgJuJb4c6NPyZFI9LG19lB0Rnv9agUafmBXzed Gwn7S8lBqu8/mempdF5Gi4KVxSNa998= X-Proofpoint-Spam-Details-Enc: AW1haW4tMjYwNzIwMDEwMyBTYWx0ZWRfXylEjKz+bOpcJ Vx+hFe4NkEjoczhjbMtm9BPeQysuK3f4o0rfgTaUcReQm0zU30aC7sY6Cs8QqHoTVtgQyvn9Wp7 HKAOdivRoWrSh8ND7oW/SBnqX0pLrEpejyyUrnfTdcIVA5DCTKexFh8ZmxcWrq7xybv0I4TnDOh lyyNzCu4H5ZZiLYl5dEc4EfEUJzhsjCDISBlTqHJYobw8IJkCbN2XTAOTvBPQlEprWjDtFypDtr UMoDfk2U+SPler9+KTjHeqdVBGoSTye2SmnT/6EAlhJrqKqPB2mmuuCrHAxiEezD4qwemsPYopH u8XFa/xQADywIs0o2Z4/wzYiXJiM2sljMs1Z0buDjxBuZvcwmDwoweIh8Smhp8NgH12aYz5rSAp IVWL7Vd1BNdm93BhVxo5cXvCSdnGOaT7q8x14oYfEZSEM/T2g/N6alAVD/Srec0ARcbE3InqTrX zTVvEAvcdHfNK1oKWJg== X-Proofpoint-ORIG-GUID: Tsvn7aODIpf_QahRbxFOFM_SNWIE0Rw7 X-Proofpoint-GUID: Tsvn7aODIpf_QahRbxFOFM_SNWIE0Rw7 X-Authority-Analysis: v=2.4 cv=CfY4Irrl c=1 sm=1 tr=0 ts=6a5de7ac cx=c_pps a=bA8WxO540RzhAQ9tgvMHlg==:117 a=z/mQ4Ysz8XfWz/Q5cLBRGdckG28=:19 a=lCpzRmAYbLLaTzLvsPZ7Mbvzbb8=:19 a=xqWC_Br6kY4A:10 a=8nJEP1OIZ-IA:10 a=RAioF0-LDSMA:10 a=0kUYKlekyDsA:10 a=VkNPw1HP01LnGYTKEx00:22 a=VofLwUrZ8Iiv6rRUPXIb:22 a=0LlEyIVc8U2lsR7dKhuH:22 a=64Cc0HZtAAAA:8 a=iamFcwByjoOU0uyVQI4A:9 a=wPNLvfGTeEIA:10 X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1143,Hydra:6.1.134,FMLib:17.12.100.49 definitions=2026-07-20_01,2026-07-17_01,2025-10-01_01 X-Proofpoint-Spam-Reason: safe Received-SPF: pass (zohomail.com: domain of gnu.org designates 209.51.188.17 as permitted sender) client-ip=209.51.188.17; envelope-from=qemu-devel-bounces+importer=patchew.org@nongnu.org; helo=lists1p.gnu.org; Received-SPF: pass client-ip=148.163.155.12; envelope-from=thanos.makatos@nutanix.com; helo=mx0b-002c1b01.pphosted.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: qemu-devel@nongnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: qemu development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: qemu-devel-bounces+importer=patchew.org@nongnu.org Sender: qemu-devel-bounces+importer=patchew.org@nongnu.org X-ZohoMail-DKIM: pass (identity @nutanix.com) X-ZM-MESSAGEID: 1784539112502158500 Content-Type: text/plain; charset="utf-8" While this isn't technically a bug, it's highly unlikely that the server wouldn't be writing an entire struct. Signed-off-by: Thanos Makatos --- hw/vfio-user/device.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/hw/vfio-user/device.c b/hw/vfio-user/device.c index 201bf34c8b..1907a6653f 100644 --- a/hw/vfio-user/device.c +++ b/hw/vfio-user/device.c @@ -166,6 +166,11 @@ static int vfio_user_get_region_info(VFIOUserProxy *pr= oxy, } trace_vfio_user_get_region_info(msgp->index, msgp->flags, msgp->size); =20 + if (msgp->argsz < sizeof(*info)) { + error_printf("vfio_user_get_region_info reply argsz too small\n"); + return -EINVAL; + } + memcpy(info, &msgp->argsz, info->argsz); =20 /* --=20 2.34.1 From nobody Sat Jul 25 11:30:13 2026 Delivered-To: importer@patchew.org Authentication-Results: mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=qemu-devel-bounces+importer=patchew.org@nongnu.org; arc=pass (i=1 dmarc=pass fromdomain=nutanix.com); dmarc=pass(p=none dis=none) header.from=nutanix.com ARC-Seal: i=2; a=rsa-sha256; t=1784539091; cv=pass; d=zohomail.com; s=zohoarc; b=jUxRAuxREjUYwE4MuAgBUsHgv4pChygtpACXuxYMYtXLG6loIqqdvbKuliBzLHTr9oQRuqRpytemR6LdzvRQnaU+of4Xqp1gJMzU5qfm5byKj90yeaLE85m3tuLfit6EhXB2gUlWv2H4h7L1MpXGlLtfC9D89TFAxF94DInlebU= ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1784539091; h=Content-Type:Content-Transfer-Encoding:Cc:Cc:Date:Date:From:From:In-Reply-To:List-Subscribe:List-Post:List-Id:List-Archive:List-Help:List-Unsubscribe:MIME-Version:Message-ID:References:Sender:Subject:Subject:To:To:Message-Id:Reply-To; bh=W1C8jdd3oPV2WcD+lWL/ohSznIFUpLYH6QNAa5xYw3M=; b=RmmsaOmxSUr/4M5TQ2bbk48cJtAcSuNT8Hv5IA40il52P5W+upuODXNT/xhS8VdBlHMwH6LI4rJdkzyprMCW+S3yveZxxwN8N0IkQ6fsP7UcCbafmpy3A6uW1Rv3VLaXgf/ewIj4BHw3nCkN+OMvqeKrG9XvWGwc/EpHLJLqF4Q= ARC-Authentication-Results: i=2; mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=qemu-devel-bounces+importer=patchew.org@nongnu.org; arc=pass (i=1 dmarc=pass fromdomain=nutanix.com); dmarc=pass header.from= (p=none dis=none) Return-Path: Received: from lists1p.gnu.org (lists1p.gnu.org [209.51.188.17]) by mx.zohomail.com with SMTPS id 1784539090956775.136154617267; Mon, 20 Jul 2026 02:18:10 -0700 (PDT) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists1p.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1wlk8C-0002uo-0p; Mon, 20 Jul 2026 05:17:48 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists1p.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1wlk7z-0002sI-9j for qemu-devel@nongnu.org; Mon, 20 Jul 2026 05:17:35 -0400 Received: from mx0b-002c1b01.pphosted.com ([148.163.155.12]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1wlk7x-0007RJ-S1 for qemu-devel@nongnu.org; Mon, 20 Jul 2026 05:17:35 -0400 Received: from pps.filterd (m0127844.ppops.net [127.0.0.1]) by mx0b-002c1b01.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 66K6SEG83770183; Mon, 20 Jul 2026 02:17:33 -0700 Received: from byapr05cu005.outbound.protection.outlook.com (mail-westusazon11020125.outbound.protection.outlook.com [52.101.85.125]) by mx0b-002c1b01.pphosted.com (PPS) with ESMTPS id 4fg90xaqus-2 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT); Mon, 20 Jul 2026 02:17:32 -0700 (PDT) Received: from IA0PR02MB9462.namprd02.prod.outlook.com (2603:10b6:208:406::6) by DSVPR02MB12010.namprd02.prod.outlook.com (2603:10b6:8:41d::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.223.18; Mon, 20 Jul 2026 09:17:30 +0000 Received: from IA0PR02MB9462.namprd02.prod.outlook.com ([fe80::c493:aabb:b834:f53d]) by IA0PR02MB9462.namprd02.prod.outlook.com ([fe80::c493:aabb:b834:f53d%7]) with mapi id 15.21.0223.015; Mon, 20 Jul 2026 09:17:30 +0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nutanix.com; h= cc:content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to; s= proofpoint20171006; bh=W1C8jdd3oPV2WcD+lWL/ohSznIFUpLYH6QNAa5xYw 3M=; b=VUNuEOXsU5wiFKzZ6hgKRXCCYvsHWWmw5vPKXgRDs9SybaZ6+k0/rW+T6 VgL6Pa1vjJ4UsBCkn40BdNeAD4GQ3/YmUY1Cgz8KzobZsynhr3rvmfXjVFnamyLp L4mstcL/YpanFiitbB0fA3xKf5Rb071wzSxzCOy7HyLIgoDo0VqKc2u7FbFo68Uo Ckulo+dTxq8EkOmqONfw492i8Vs1cwyApuxHxjeBAwL1ZZoRSYJgZ2bTnmBvd7U6 J/gazRVtynYPZDbwVmqk44ik7nFoyMBcdUUAWbZOlNCtJ3IDYDN4xcDWDKvFf7v3 eW/FVg4lzFgU/BEBcu9Lyo575q7Gw== ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=qrDckvnM9DJCCU0Sql5CA9rrp6C3LDw1CQ5Kcx1I9s8TaSgHZi4WpQR9Np7Aq5xA86S2GavqTVbmSLx7wVvdoB/Li8GQVDhTS7AaJaI5i4g6oIMs38bB4oSW6M8YI+EXrWSYE7AQ1TvyrrDXH5BB3EjGuAWoedMB2BazgvwrPiJk+k/EN6lWJpzkvxgkh7AMtzZpzoV7QHy4fe65Z4Zv5yk1/pVfbh5FPr1Yig+I5ShtX/WR4w2JIiBzZQ1I3C9TloMsGDjA/CbAJu0DkLgse90iWGWFPV61NkmTPbbnWWKcO6KmqOzAaIOsOgOwlclRYI5/Hewcfxx/Zzt//nR90w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=W1C8jdd3oPV2WcD+lWL/ohSznIFUpLYH6QNAa5xYw3M=; b=asEoC+17LbU52MPdruBCJTORPP0SSA+vTsnBQB+5JbEuY0pRyXq475n5Jau6IcMJArOhHcHNjSRwvoRux7PsD5jyqeQGI2lnqbPBGyi+2u6V2BwYF5ljKrtBq1BubtKdtkNrjZd+z0tmmFeqBvyl3twDRfFejYjMSVZM+smKdaaF68hx7U4AL2OOExyd9pJ7xrMrLQ8O8EH+fhFTJ4Ktj6DA9NSXyk7nwEEBbzaU3e+9ImwQUgSxYKb7ud8FayXkdE6l+WFH8X+cv4ly3A5V6oKJClL6UOkexnceD4aEt1eFf2c86lzIEMtpbpGudS55OFSIm9uumRiTNYnDVEMZTQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nutanix.com; dmarc=pass action=none header.from=nutanix.com; dkim=pass header.d=nutanix.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nutanix.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=W1C8jdd3oPV2WcD+lWL/ohSznIFUpLYH6QNAa5xYw3M=; b=lbqH5jymCvOLR358cCIy+t1JHub8O0xfN5gq6hWFaJC5ea0X5hxQRIDpwIWf82kxv6WPF5n4G50mJdlO+nex8pFPNQRtsD+JSwMPoJjsVzpjy3ui/Y3cP1pAcevgK2ON6bhPJqmwqjZAOSbtBMm4iFRhxzL8w12MUtcniBsvaAUd212HpTgdaC1flfNMtIb05uETm0P2ffB/LPE+qDO4vG0cqs29RCp4b4c+u55f01qQb6H3URB6jKTDOMA0AN1whWwlWysPKmB8oUKiwNUoIrZR7LWy/rCuZXVKquvUAQ6xYGPO4D1c96jdZmS3rVO6F05J6pTMgEZJ/F5PqZS2+w== From: Thanos Makatos To: "qemu-devel@nongnu.org" CC: John Levon , "clg@redhat.com" , Thanos Makatos Subject: [PATCH 4/5] vfio-user: vfio_user_get_region_info: prevent excessive malloc Thread-Topic: [PATCH 4/5] vfio-user: vfio_user_get_region_info: prevent excessive malloc Thread-Index: AQHdGCiXPAzqtXek9Ey2cZEKaM6pcw== Date: Mon, 20 Jul 2026 09:17:30 +0000 Message-ID: <20260720091718.2642-5-thanos.makatos@nutanix.com> References: <20260720091718.2642-1-thanos.makatos@nutanix.com> In-Reply-To: <20260720091718.2642-1-thanos.makatos@nutanix.com> Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-publictraffictype: Email x-ms-traffictypediagnostic: IA0PR02MB9462:EE_|DSVPR02MB12010:EE_ x-ms-office365-filtering-correlation-id: f6f40e1f-6f3a-4c5c-c6c7-08dee63fb9c1 x-proofpoint-crosstenant: true x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; ARA:13230040|366016|23010399003|1800799024|376014|10067099003|6133799003|56012099006|18002099003|22082099003|38070700021; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:IA0PR02MB9462.namprd02.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230040)(366016)(23010399003)(1800799024)(376014)(10067099003)(6133799003)(56012099006)(18002099003)(22082099003)(38070700021); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?iso-8859-1?Q?7mRuOC8GXBm3DYOAOrGeba6y33+d4+m0847ZB34+Hur0x7B+bYq/CHcBTu?= =?iso-8859-1?Q?MabigqKBSM542Jpld84XiC6wmwN+VuUtE2zik/0zHO2xQ3sztSahJI/oFE?= =?iso-8859-1?Q?6010erHC2MesHpjLseySORKK07SQiyD+UgewXFOUfSGGH2Jf1PDb814EJc?= =?iso-8859-1?Q?l2e0fI+U2zEaj5LQEXWL5Njcmh49ZJwRKMMJSvoPUvaMReL0D3Bw1U9ife?= =?iso-8859-1?Q?8x8M2817F9Cm3ahx4p9HYcSbXmfakXSUx5tj1pcd5EbdLciE/xcI1ui4nv?= =?iso-8859-1?Q?EPjLuVWdjCK4C8n7XikMirOsOMllH4/NFSKceyGQPTTFECZNVTMvWHnN/T?= =?iso-8859-1?Q?+BKSGJ+ww498S2s+DW74sGfExjthhpkepn6g7D+kLoz9H9Fgg+Gq/hjHJg?= =?iso-8859-1?Q?c0ieaXb4DLMZj8TvPu39eOiklShmbXcTwrcDzS8fDZ/DHUHoEeU5NxCzi7?= =?iso-8859-1?Q?YiLd6RKrzZzSB4wuhsi230ghLxRBGekqUzS1s5MTyOXj5JmmO22JATqM1l?= =?iso-8859-1?Q?mfnD71PlleQ4vcXG1B6lpc5L2vBsqbZ4XwxJZ/J3Az7Dcq0Amks34d4ghg?= =?iso-8859-1?Q?WIPQ1leDgCezzrRYpltdnEy0IneYt40vDGHTMzn/HZ0+F9zHQwSKLlyMo3?= =?iso-8859-1?Q?OLzDF76v9EYag4a2vKYdWCHYqEBYmMJTukErHHnvB+XuMRetGuTly+FBVE?= =?iso-8859-1?Q?9M30kf+xGbipU4zHNgkPOQUXqCDZ2H9IIKeTIitU22TWH2UZcboYQY+Gas?= =?iso-8859-1?Q?aLsYap+bREULd20X6YeDUk6Hl3zJdjKooFIczA3gRtf3YyqkuWD2iCsQX5?= =?iso-8859-1?Q?1rhumv45Tea5QpRZc4bzURof3Igh2y5Kp09LB7/RT3Y5NOfx2USsDQLqIz?= =?iso-8859-1?Q?rt/u7XrxQcwl/cdEsBMHrOClJbF8cGpB60wZ0ysW4hZGLHwJDG6L1zaWi2?= =?iso-8859-1?Q?U2Es/AQZeZIKsRWQiHpaQPZW3pK+joIJEzlwEzG9XM38ZGJ/me+26czrPE?= =?iso-8859-1?Q?bQIU4SZiFSkgyj0icwr/SsWRuS5gMzCdZ1Y4lmzKHyN5ELGSzXRJLG/IJN?= =?iso-8859-1?Q?GkieedNSKIAFXRHj6/WsGjLIs9SUHid8DsIh0W+3sOt4Xlpm5hYKnUsmHZ?= =?iso-8859-1?Q?hRQQsXd/zXXhgCQ/0KA3xtJLmTJj5U/0STCMLLCOuPCX7Vt0ah3nFPRKma?= =?iso-8859-1?Q?qmOvnjHn7QbA/4D2QSNPzGqk2Fs4iZd4Vsv4EZX710Q7BbUczLgTxJr01Y?= =?iso-8859-1?Q?fgvxiJPXGYakrxdbfeJTQAZySPfUmVdt5ZKAc/tRnMlMDbgdB2lXoVJoKF?= =?iso-8859-1?Q?NzkXPuD9zTP+jz3ZurLaUDOKPDSZ/4YMs6DqIYRG2+UGopMSmc0dLU1YKZ?= =?iso-8859-1?Q?w0N6iCehJlC2v7jszFptOVv1UuqAikrZbXEECOPA2Hd+Ltm0IrYu54q3DJ?= =?iso-8859-1?Q?WCb9SpX5GFjpS/VQXBHphc0ofnG73okdLWW1Jx+zpNBdbFsTpeaR8tXnm0?= =?iso-8859-1?Q?bqTtBCDrCcsxChAZtpMLHWBCDTVoDrG4CCW34+51I37yE6x2hB2l98niaP?= =?iso-8859-1?Q?Hjb8GOLexH5iHobyR7XPGK6pkd+TGA2CK4evI95dtBGNI9spAUDUuenfZ/?= =?iso-8859-1?Q?zkwVyomPDMfqQZs5uFA+mqH6UAcFMP78T7DPL7HYDdw6AHN7ZFdwo6ZV+T?= =?iso-8859-1?Q?Dq5/BwcZipZt3mIZomyDoAfTVY4bgCUKqAR752IjMnD1InJVjbzWkGHeSt?= =?iso-8859-1?Q?9MpghCWFxN/CiM/UVvfTM1rPS1/uM9ARoOl8iO3f0iTlXciERxsQQZAY34?= =?iso-8859-1?Q?Ua3JwBhGLo2B76q94CuYI+fukAONLco=3D?= Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Exchange-RoutingPolicyChecked: MFPNrouBxbPfFbXP1Y6/L61xRTXlQEhk0HzbpHbDLQdW/chnpuc2IXpLmTXLLLpjYFufhDXECHeb/MzFUVrDtoYg5TuhF0l2z+7rvzmVdkHL7AqoAVON4rSmz5zlFmz4yq5hxJzjDK+XVrrTPeOx+AY+/HSfQwAVUslniJfo/Z9+Ww6trl01/gCxsgp48MhBXA7nMJicC6Rem25Xdx8CeKa5GuA4+svKNTeacVBKYgvxjTzpQbhx0bLSKsEix7Hr/KV2rwTk0BSaArrDdxSRFMaOpSgGeYBsvsMQfm/yPoOhwIn2C1bxg7aZ9mGOdBLIhWQpX7FZOque585gth6skw== X-OriginatorOrg: nutanix.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: IA0PR02MB9462.namprd02.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: f6f40e1f-6f3a-4c5c-c6c7-08dee63fb9c1 X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Jul 2026 09:17:30.6678 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bb047546-786f-4de1-bd75-24e5b6f79043 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: VlRI5G19PcDsChOf/jYNW8vzLzfgm4AkmhpL2vXr/5nX5Od0Fc5KIG+9/hoZ52APBYH4KAmpAJVED1Exdv6GfVYzSaEk36dqjWHoAnVoG0A= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DSVPR02MB12010 X-Proofpoint-Spam-Info: AW1haW4tMjYwNzIwMDEwMyBTYWx0ZWRfX+eWfGReebtqT FhizkiTmzwTqbM99VDi88l+KQ6rGYFv8KsClbIrSEQcI0kYIM5/6KOzjnMiwqHLgzPhmwSovHUe jkbH/6OYkLP1EClKX6fh1KlvApBwRpA= X-Proofpoint-Spam-Details-Enc: AW1haW4tMjYwNzIwMDEwMyBTYWx0ZWRfX+gVby7r2E4iv U0m0uYSrv9IxCHsuY5GJZxeaLYy3WXmkqfuhAXrTI2xq9dyS++YjqPPLrCOKpdT4CgB5/IJ7sOj ff6S/1xYaurMNrtYcKadX226K8nzRLSeR02KBY5KyBC76+cL88iN5rGnoKERwJ6zUUuPeVa6gYI aG62YVl3viBdzNL3BdvQlR4rumo1mK5d2PXyikLTkdLl/iEM8sdPESRF+tb/H3Q8nAB33dSIweL edSKvcoRCLsEtWUYwvxDRtOwpuCUtmkJgwGlC4eSUzdXUaFFB+HH1PlhPhuOr2/zLlnIoVhGZGr 1WtK9lvAW4IaknETmhRGoN4kFoQZctKyBxbohOOpMKh/gDzTkuWfqO7ZJrni81Yse9KxCiaPfYS 29cCKNfvCLhJdTcj9GAt+RQh7vDdNt9Z+6O6+SCim6qQg6PBlesfYoyGkKKAQyiucfvej1GIyAw VMn/M+e1zHfkGtDDNTA== X-Proofpoint-ORIG-GUID: nFdkPz1dSgjrp74FYzEuxJQIbUWOy9N5 X-Proofpoint-GUID: nFdkPz1dSgjrp74FYzEuxJQIbUWOy9N5 X-Authority-Analysis: v=2.4 cv=CfY4Irrl c=1 sm=1 tr=0 ts=6a5de7ac cx=c_pps a=bA8WxO540RzhAQ9tgvMHlg==:117 a=z/mQ4Ysz8XfWz/Q5cLBRGdckG28=:19 a=lCpzRmAYbLLaTzLvsPZ7Mbvzbb8=:19 a=xqWC_Br6kY4A:10 a=8nJEP1OIZ-IA:10 a=RAioF0-LDSMA:10 a=0kUYKlekyDsA:10 a=VkNPw1HP01LnGYTKEx00:22 a=VofLwUrZ8Iiv6rRUPXIb:22 a=0LlEyIVc8U2lsR7dKhuH:22 a=64Cc0HZtAAAA:8 a=Wq__iFXxit1-DUNQLyoA:9 a=wPNLvfGTeEIA:10 X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1143,Hydra:6.1.134,FMLib:17.12.100.49 definitions=2026-07-20_01,2026-07-17_01,2025-10-01_01 X-Proofpoint-Spam-Reason: safe Received-SPF: pass (zohomail.com: domain of gnu.org designates 209.51.188.17 as permitted sender) client-ip=209.51.188.17; envelope-from=qemu-devel-bounces+importer=patchew.org@nongnu.org; helo=lists1p.gnu.org; Received-SPF: pass client-ip=148.163.155.12; envelope-from=thanos.makatos@nutanix.com; helo=mx0b-002c1b01.pphosted.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: qemu-devel@nongnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: qemu development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: qemu-devel-bounces+importer=patchew.org@nongnu.org Sender: qemu-devel-bounces+importer=patchew.org@nongnu.org X-ZohoMail-DKIM: pass (identity @nutanix.com) X-ZM-MESSAGEID: 1784539092622158500 Content-Type: text/plain; charset="utf-8" If the vfio-user server responds with a value larger than max_xfer_size vfio_device_get_region_info() blindly uses it in the next loop in g_realloc. An value larger than max_xfer_size is anyway rejected by the check at the beginning of vfio_user_get_region_info(), however that only happens _after_ the g_realloc, and if that value is excessively large it can cause g_realloc to fail, so check it here. Signed-off-by: Thanos Makatos --- hw/vfio-user/device.c | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/hw/vfio-user/device.c b/hw/vfio-user/device.c index 1907a6653f..d7cf39dda7 100644 --- a/hw/vfio-user/device.c +++ b/hw/vfio-user/device.c @@ -171,6 +171,16 @@ static int vfio_user_get_region_info(VFIOUserProxy *pr= oxy, return -EINVAL; } =20 + /* + * The server can respond with a larger argsz in the reply to request a + * larger buffer on the next iteration via vfio_device_get_region_info= (). + * Reject values that would trigger an oversized realloc. + */ + if (msgp->argsz > proxy->max_xfer_size) { + error_printf("vfio_user_get_region_info reply argsz too large\n"); + return -E2BIG; + } + memcpy(info, &msgp->argsz, info->argsz); =20 /* --=20 2.34.1 From nobody Sat Jul 25 11:30:13 2026 Delivered-To: importer@patchew.org Authentication-Results: mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=qemu-devel-bounces+importer=patchew.org@nongnu.org; arc=pass (i=1 dmarc=pass fromdomain=nutanix.com); dmarc=pass(p=none dis=none) header.from=nutanix.com ARC-Seal: i=2; a=rsa-sha256; t=1784539111; cv=pass; d=zohomail.com; s=zohoarc; b=SHStGJaYkiHr8CefAFwl7hK3Ma3KQHW03QuGH90MrA4lVP5LfMxTVOJrul5fyJ+NsJRnL6JbOJYxixzXIu6CLnqvGQSQZz2dGd9CaQWoOOdXaO6xTLSZ5kRRegp4SrQPx35chUYKZxGE6heoPE7xjUvYBhVMcFk3xKLVzlnpuO0= ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1784539111; h=Content-Type:Content-Transfer-Encoding:Cc:Cc:Date:Date:From:From:In-Reply-To:List-Subscribe:List-Post:List-Id:List-Archive:List-Help:List-Unsubscribe:MIME-Version:Message-ID:References:Sender:Subject:Subject:To:To:Message-Id:Reply-To; bh=N4wvc8xCvzD9mHpeL3qfSQf/Kkjc/uWQgCXmYXQQR7U=; b=QFIE/UJZ64Nac9a67TZJ44Dh3NLQiLiAZsWF/rrcdXosjCZ9uv8fxF6Fee/x51ezoPsTTVaOVOOb1GMncx5Fkp8ck+81Wt7JzT/hOQtfAWR90jfKLfhNlE0R1RQTiGbRai7jo/Pl5id8N4L5YDjPqZUYJ6iyMlmSfmeclzXIK0g= ARC-Authentication-Results: i=2; mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=qemu-devel-bounces+importer=patchew.org@nongnu.org; arc=pass (i=1 dmarc=pass fromdomain=nutanix.com); dmarc=pass header.from= (p=none dis=none) Return-Path: Received: from lists1p.gnu.org (lists1p.gnu.org [209.51.188.17]) by mx.zohomail.com with SMTPS id 1784539111677784.5749210007867; Mon, 20 Jul 2026 02:18:31 -0700 (PDT) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists1p.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1wlk84-0002uK-HA; Mon, 20 Jul 2026 05:17:40 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists1p.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1wlk80-0002se-1E for qemu-devel@nongnu.org; Mon, 20 Jul 2026 05:17:36 -0400 Received: from mx0b-002c1b01.pphosted.com ([148.163.155.12]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1wlk7y-0007RO-Ev for qemu-devel@nongnu.org; Mon, 20 Jul 2026 05:17:35 -0400 Received: from pps.filterd (m0127844.ppops.net [127.0.0.1]) by mx0b-002c1b01.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 66K6SEG93770183; Mon, 20 Jul 2026 02:17:33 -0700 Received: from byapr05cu005.outbound.protection.outlook.com (mail-westusazon11020125.outbound.protection.outlook.com [52.101.85.125]) by mx0b-002c1b01.pphosted.com (PPS) with ESMTPS id 4fg90xaqus-3 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT); Mon, 20 Jul 2026 02:17:33 -0700 (PDT) Received: from IA0PR02MB9462.namprd02.prod.outlook.com (2603:10b6:208:406::6) by DSVPR02MB12010.namprd02.prod.outlook.com (2603:10b6:8:41d::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.223.18; Mon, 20 Jul 2026 09:17:32 +0000 Received: from IA0PR02MB9462.namprd02.prod.outlook.com ([fe80::c493:aabb:b834:f53d]) by IA0PR02MB9462.namprd02.prod.outlook.com ([fe80::c493:aabb:b834:f53d%7]) with mapi id 15.21.0223.015; Mon, 20 Jul 2026 09:17:32 +0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nutanix.com; h= cc:content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to; s= proofpoint20171006; bh=N4wvc8xCvzD9mHpeL3qfSQf/Kkjc/uWQgCXmYXQQR 7U=; b=oXIsESg8qNWWkLD2+wSszqUzShCnwC9SIFKBTaXiLth641+eFjGVNvfiU EORYpi+Nvmbl8VfEecg8Nhs9BN/MtuKFxw2PT+n4ANtc9Ocai7MIJ72xc1D7tMhq aBDHNxBtRsXrY4qhgLQt/bYkrNfIzu//ERHrCuWC+NLDO6kbzzcKx77hC4jjdGxx 2OGdqLrD8QbkOtYHx38NfcT55NwEWmJJP65DNAsI9lx42JGaOtK3qiusTfvd531Y QGS+gFCK5kIleUt3UMj3InUGhtFwMoLflRLdnEq61eG7rxSnRRpKDRWFc9eoGhZO QaxQav+xT9ol36s6I3McgklNpDxBQ== ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=s0zm6aqc3t1V3XM+6NtBi4uO2F+ysBGIo6OVarS8ZRFaQuLaWrqkXZ4hnasnwxT4Fh0ygcngAz1c0Y9sFzZevjnJCCdmMq6IhN5egGiQrAID7a0tQMhKJtM225mwjfqk01nXvMY8g3BQZmPPIW7p5Be87pEc8G2WKzTomABU1fNBox13l8vsPc46MdBHm/MXHZravAjtrSHAukH/PzVQCXeCNS+ruGPf3GvhJEwLzD/e4SHUq+PG+kCyG3oRXasYTIH47jUbtUf2wZoF5p90iMr+z2Fnco8g7W4OnoC8veVFp9qYL10k3X8dx/7eg6+V80bTFL/aI66nzPC9cAwFaw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=N4wvc8xCvzD9mHpeL3qfSQf/Kkjc/uWQgCXmYXQQR7U=; b=IybVPG2JS+71gQ5GOQrXKe75YU7gGWwpgHa8O2qiEc990MopwxPFiCIIKg5OhyM12TXgMRTFq0UM/cBZX+Xj4kKVIMYcOLpPneSk1PjGDwqOn8ayYBmanjnX/vmAvrV3MQYoYN5yCGD81ndA/81pRimOdCsmdyqDl+fN6Cr/Huj6iZ2xrJwo/Yk2vH3GhldL4Yb1hFdYiRVQHltc+41IhD9ZkvSYpJ9RJgUGarXfoaPcSvI/gVrCxUFeAJd/jzfddhQ0KMW7xBYLQ2EVp4H3zmZacJWJzH4vOZWG12HEa4dge1cWIeWce9DZNhYZ4MN5slkLH4XhNhlz2L89R7oYNg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nutanix.com; dmarc=pass action=none header.from=nutanix.com; dkim=pass header.d=nutanix.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nutanix.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=N4wvc8xCvzD9mHpeL3qfSQf/Kkjc/uWQgCXmYXQQR7U=; b=cJQr1eEBGsdbHBK9BqMl+RHYWEYaj0RQU5MBH/mTaBwyfwZE69i1j+nUndkRQUZYTcmYScqbpKw4m2QOYD6jAykgED3HFecJmMnWrIAJWix0z1aNet15RLkckVwnjDX5jARw0lXhi0IcKBFDwwHxlH7tnYIurj77JkFNe4Tp/Fc5wzvLhldgaBBnVjGXmqIif0pU+OFcOyUfQscby6/oUbt8Z3D77wJUzKcHh39BDUORW3vd5b7xqb4jAdswou04goJH3m0PqHcoY1QGCNWiqKT0Eb7aLh0hd4PgY7RJ82MUG5W0vtMt46CqKb3z8M1k2nHX1QmTHoamHO9Wte9m5A== From: Thanos Makatos To: "qemu-devel@nongnu.org" CC: John Levon , "clg@redhat.com" , Thanos Makatos Subject: [PATCH 5/5] vfio-user: vfio_user_device_io_get_region_info: fix capability check Thread-Topic: [PATCH 5/5] vfio-user: vfio_user_device_io_get_region_info: fix capability check Thread-Index: AQHdGCiYBdWW1VvgzU+hrmmEztneGQ== Date: Mon, 20 Jul 2026 09:17:32 +0000 Message-ID: <20260720091718.2642-6-thanos.makatos@nutanix.com> References: <20260720091718.2642-1-thanos.makatos@nutanix.com> In-Reply-To: <20260720091718.2642-1-thanos.makatos@nutanix.com> Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-publictraffictype: Email x-ms-traffictypediagnostic: IA0PR02MB9462:EE_|DSVPR02MB12010:EE_ x-ms-office365-filtering-correlation-id: 813824f4-c724-4447-3701-08dee63fbac3 x-proofpoint-crosstenant: true x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; ARA:13230040|366016|23010399003|1800799024|376014|10067099003|6133799003|56012099006|18002099003|22082099003|38070700021; x-microsoft-antispam-message-info: 8vLW2tox72hQVpeSTAIC/pGs0PlXibcFu+lAO1Q9WNcN3G+YDnkQdeTHYJKPG86jrJGmmy7mXhl9U6jWq6oQjZhpci/rtkePWpV8LBvtG0y90nMgUF6yXTobQIRCeH9+dUypI34FXfkNIuumgNokjtiT0lnoeLwBoot6zDtFCsmzGmQ9NYH9KlG5Rtn7QFUnynE0AhZidBXM6rAhiHbGlaVLTl1nKGtM17zsADynBs773spGKul/OGqBylQZZyzvZhrDjCd/cAwGR2quibp55g0tFxWG4C11oZmUaurTojR5l8ikdkNYXT6YmseyVuKXKhYIcvJ+H1KtEK60f1dajscpexWA9RWbdPfYZ1WRP8Snv5GfxSmjDBQtQgP75LPmY/1WN4JEZk7xhypOTrzLB98ATjtPzqU31dLrU64wtqW4R9kKFWlCIGfe3/cyh9ezhOrxbCZJY3NkeXdRz2wJnNd/ROea+9elL4JDHez9C2fBGlYDgqjTC9tTeNr7CemBQafUuXLeZB7zEyq5wBVNYfudIkYEKcxkmEso4UwcNFvHIXf4N3ZomQJM9NVhgfg+lwQ+pULwE42kbrnKPBbGhJKmqqtqsBYs8n2YVgA0pheNOtrSrZHWXJv7Tq1TrJHKBTQmxFCdx1XOx0d3n+T4IZgRCMH05+BFj/w+bZWW8oCcqTlpDwsGMwm4wrra9sjmydkr5idD1AnEsebqTbQi4Kx2B6P7Q2TvozcC0MX+Z1s= x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:IA0PR02MB9462.namprd02.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230040)(366016)(23010399003)(1800799024)(376014)(10067099003)(6133799003)(56012099006)(18002099003)(22082099003)(38070700021); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?iso-8859-1?Q?/jdgMpnmHKW/hSvb3Nm6yqHRs2NTZaGeU7aG6AGJSfSoZyIA0WySTev5cb?= =?iso-8859-1?Q?LdYmDjY8d7cMdVamyFtbQ9MBFUeH4Diu8AjvuAYs7WO/mLzCHmWQu+HZhl?= =?iso-8859-1?Q?fjNzGn+QkSapw4pz889Ijzcs5105NiTaPCNhhLWlOJl/v0bo4GojcMNj+n?= =?iso-8859-1?Q?IHopmo184pjk0CfBLm2omDm/zrQp3n2pvSVM/TN/4zWW3zeu79wyK+BVww?= =?iso-8859-1?Q?suJY7jvkS+Mqvy/dowQL/zrmsI4P7GPX3dfxhmoo4rZknT7A8HafzAPuRI?= =?iso-8859-1?Q?JqivwQgDew5rIXX7dJ7L7mNyI3SC5uOVvsxOdk7eQuEx4FepNehEV+IhEY?= =?iso-8859-1?Q?ny9PDdeAwjjF/0D4oOGRVN9HXePkFTRxIpLZVNwL4cCy7riwvXrMMSrJRN?= =?iso-8859-1?Q?eEGvz3qFG8wUMAEB6m5SrmncIBPIZUnxSWLeVXNkTps/9An2TxAnVch3Uj?= =?iso-8859-1?Q?aXw1RWGoHhO49ZyWGuCdwtA1GFUvXmKXl/QFo5423cRDJEBbK9XaC7GIhg?= =?iso-8859-1?Q?Q4tyE80Wwfg1/MuvQD5fiFEOxVjvV/gM57PjJYppjk+pkEa7XfbqDypwOs?= =?iso-8859-1?Q?3Y5zi7G4wngmbqdkM/MSEIU7ZjzmVoV00K120A9nnTHFcZaC5558dR61Ix?= =?iso-8859-1?Q?PmRwAw226aIr9kRu5yH0B3/XGN4qjBgNlpKOR1Nt/GIZZku/gni/2LlygT?= =?iso-8859-1?Q?vEgTtpc/S4Nu6y4gzphxqQM3FfbS5CphvFE8axEmeOZB/Fw+ONmQ2vN27p?= =?iso-8859-1?Q?gwT1qF0apdPFkxdpuOS5zKsphXclPpSc8P0QsyUfv0rRVS7imkzxBH8k5A?= =?iso-8859-1?Q?+uXeK4OMtOaTBwt1IKu9hmiTiXJPxKHAouljvaU2M/af/oLMwVFa2EaT0H?= =?iso-8859-1?Q?yd7siU5TorSVY9NiReMpfk+dXnJwmsyojJbXr+0UToOx8xd86BSpbU9uPG?= =?iso-8859-1?Q?632Mc7v+bpQ0OBJW/ozZAAnzevq+SD/+Q9hRZ90ha4xqILANPJwIUy61ih?= =?iso-8859-1?Q?XjLRXaU0X5RZICsmZCbSFwfCcOCS4mmJhgXjeXj3fXVym1Kquv0C1teZIO?= =?iso-8859-1?Q?z3R+Dm4SJ8CWp3OYftYr6Q3RCJafm6a457C/C2oGhOmOJNQ9rUz7lmBVYH?= =?iso-8859-1?Q?QPliDeQ4zLH3iR06DicR2JCIpDM0fRRj/jbOym6bDNzdI9G939EYM13w7v?= =?iso-8859-1?Q?jHTGNhXJ1f8DdHfloU2WRaUyWVxextEsMmkbJXltpLwCb41eXwyDm4qqJh?= =?iso-8859-1?Q?AcFjOgMn59shGb4yh0FOZ/6ueFDkAL69YGAPTgKPrGX/ryJQMxjpvt43A+?= =?iso-8859-1?Q?iIWqsBRycHxpkMwI4/512jmIEvMMHUYJQ4CSU/l484nFJDjaIeFQOmGnCE?= =?iso-8859-1?Q?uRqbBDjfgr4igTL0iCXBv1cWFwoJ9yIFqyNvwTxzWekpE4T3T62iTxQwJ4?= =?iso-8859-1?Q?LQXVUGzhs8nHx/42PZR9wWIVp6bIkXP8PkOL9d7xIOq0b4Unvto89a/84m?= =?iso-8859-1?Q?T085hLs71akGNutWV8xcH343LOIhzGC+qrt+r8WZ0+FZuyI1Ncz7KuieXM?= =?iso-8859-1?Q?yImy2ASilOyOiNNM+6N/VnbhPurvLWMBs4PyKr8HOoan2Jt37WcW68Hfws?= =?iso-8859-1?Q?rCFhhom99W0UpSC/fRZuupZ2m4jNfApNU32KNjKrxZ3ugGujD/vhNFQh9W?= =?iso-8859-1?Q?xpK5G9VmX5bn8+f7Ih3fg9d8rnyjh6AWZQcc2uIp6T0GEu1efOmHIAyYhn?= =?iso-8859-1?Q?R7mk2ZPTJsfklshPBY+DxYrbFYSNWo7ARh6VnkAtnMCtRI85N/y5jSw1Ea?= =?iso-8859-1?Q?qaUrxdFmeycdGMlvoxt4ET7urZDCwX8=3D?= Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Exchange-RoutingPolicyChecked: cnyZN5m0t4jhNR6QPnzSl5gLCbB0iMlHO2aNut/GPKwYZMOmw9E5nDSp+q23QYbd8hd+WRuP4e553uQLyKE8Xma8Q7peCyUbUtwZO9a7inykUYHCsEcOs+A6dm7HddodaxojnEoAkESylPef45F8F5SnYEr6Q8t+6vmFEeEbLrkN5++zuuUZvII8BzL4CHj6RICUCXhaRkuLOnTbQip432oF/zPiDyPztcouhZlW0v4+bLIsg3w/sqsXzq4NZqVT3ZIPNl/pJECTT51iWN8q8ynirkrVrnnyVmYp3F+zWB+6I+mDaPj5pjLFgP9GYIRDvd4TdAvXi+hqRTkrQqhG8w== X-OriginatorOrg: nutanix.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: IA0PR02MB9462.namprd02.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 813824f4-c724-4447-3701-08dee63fbac3 X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Jul 2026 09:17:32.2708 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bb047546-786f-4de1-bd75-24e5b6f79043 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: KMKBykA7jZbvriz7VkMSRQtzbP/6PbAQquCikX6ABBfRos5kegGyJzcq95boF6q1Zg1HqK2EJ5C07sVGUu1iU/vNpFPav4G+yLbeK66ZWqQ= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DSVPR02MB12010 X-Proofpoint-Spam-Info: AW1haW4tMjYwNzIwMDEwMyBTYWx0ZWRfX/bZFmBveHo0e yLK67+YWlViLuSCJ94KcQDYYmHLKV4kIFZRCtoxqy1XKq2aTG1+ozKODkaZUnYt/jELsPZt0qdm E7olZFVQ0tV28EnuluF3mXwlUC+Ddms= X-Proofpoint-Spam-Details-Enc: AW1haW4tMjYwNzIwMDEwMyBTYWx0ZWRfXzYdTUSkRfLiw /Sbhu+GjWA0KWmEZHPelZ4hcxiHZyHldW6R6KdLQ6H4oOACog8r/1H3B6iDom59QiHXIu35u3NB BWM8K/f2mCUAbBlpHMUGiEzngiF9wwuHAdY3AalQtrt4oa8iSXSC16ixqWb5w4Xzi/mNvN0koS1 CMwDQC9wqSynUgEkyV8gZSvrVSvTH12HTcdNG703o+kIl1ankv8LKeGAFqM4GrDcihbGfik+MnT WyI9TPkmnqnUY6Ra2iTKWuHsIp9Ielb5eEmD2K50RbvcYbkHOtqhg4cvreqrT2WeDAz6LLr4c7i VkQnY+cY2FD0G04ztQ0xp9iArIZAOPgFQgC7UOPRGHOi4ZUINvEhOjw7mT/Hzoffy6Xs6fHQ0x2 j/kF8UmR9GwJ6byVALFV2D8bqS+PBoeN5QAFFRRJvI872vBLJb+3EsqBPGIN5Fi6eFokwPxM2J7 pAGntvOz6OEhaJHK6IQ== X-Proofpoint-ORIG-GUID: SToq7YiZsHIdEnHt_PEMD3ut4hPone6y X-Proofpoint-GUID: SToq7YiZsHIdEnHt_PEMD3ut4hPone6y X-Authority-Analysis: v=2.4 cv=CfY4Irrl c=1 sm=1 tr=0 ts=6a5de7ad cx=c_pps a=bA8WxO540RzhAQ9tgvMHlg==:117 a=z/mQ4Ysz8XfWz/Q5cLBRGdckG28=:19 a=lCpzRmAYbLLaTzLvsPZ7Mbvzbb8=:19 a=xqWC_Br6kY4A:10 a=8nJEP1OIZ-IA:10 a=RAioF0-LDSMA:10 a=0kUYKlekyDsA:10 a=VkNPw1HP01LnGYTKEx00:22 a=VofLwUrZ8Iiv6rRUPXIb:22 a=0LlEyIVc8U2lsR7dKhuH:22 a=64Cc0HZtAAAA:8 a=qQMp8MJb-caXfZ2aa2cA:9 a=wPNLvfGTeEIA:10 X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1143,Hydra:6.1.134,FMLib:17.12.100.49 definitions=2026-07-20_01,2026-07-17_01,2025-10-01_01 X-Proofpoint-Spam-Reason: safe Received-SPF: pass (zohomail.com: domain of gnu.org designates 209.51.188.17 as permitted sender) client-ip=209.51.188.17; envelope-from=qemu-devel-bounces+importer=patchew.org@nongnu.org; helo=lists1p.gnu.org; Received-SPF: pass client-ip=148.163.155.12; envelope-from=thanos.makatos@nutanix.com; helo=mx0b-002c1b01.pphosted.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: qemu-devel@nongnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: qemu development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: qemu-devel-bounces+importer=patchew.org@nongnu.org Sender: qemu-devel-bounces+importer=patchew.org@nongnu.org X-ZohoMail-DKIM: pass (identity @nutanix.com) X-ZM-MESSAGEID: 1784539112499158500 Content-Type: text/plain; charset="utf-8" The existing check for PCI capabilities misses the case where info->cap_offset =3D=3D info->argsz, which results in accessing unallocated memory. Fix the comparison. Signed-off-by: Thanos Makatos --- hw/vfio-user/device.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/hw/vfio-user/device.c b/hw/vfio-user/device.c index d7cf39dda7..ce437b2464 100644 --- a/hw/vfio-user/device.c +++ b/hw/vfio-user/device.c @@ -215,7 +215,7 @@ static int vfio_user_device_io_get_region_info(VFIODevi= ce *vbasedev, =20 /* cap_offset in valid area */ if ((info->flags & VFIO_REGION_INFO_FLAG_CAPS) && - (info->cap_offset < sizeof(*info) || info->cap_offset > info->args= z)) { + (info->cap_offset < sizeof(*info) || info->cap_offset >=3D info->a= rgsz)) { return -EINVAL; } =20 --=20 2.34.1