Alex Williamson 904c680c7b vfio-pci: Fix possible integer overflow
The VFIO_DEVICE_SET_IRQS ioctl takes a start and count parameter, both
of which are unsigned.  We attempt to bounds check these, but fail to
account for the case where start is a very large number, allowing
start + count to wrap back into the valid range.  Bounds check both
start and start + count.

Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Alex Williamson <alex.williamson@redhat.com>
2013-03-26 11:33:16 -06:00
..
2013-02-21 15:27:22 -08:00
2013-02-27 19:10:15 -08:00
2013-02-27 19:10:15 -08:00
2013-03-08 08:36:01 +10:00
2013-03-01 13:39:00 -08:00
2013-02-21 12:11:44 -08:00
2013-03-05 17:22:08 -08:00
2013-02-28 20:00:40 -08:00
2013-02-27 19:10:17 -08:00
2013-02-21 15:38:49 -08:00
2013-02-27 19:10:18 -08:00
2013-02-26 09:34:29 -08:00
2013-02-27 19:10:18 -08:00
2013-02-28 09:37:12 +01:00
2013-02-21 15:27:22 -08:00
2013-02-27 19:10:19 -08:00
2013-02-28 19:59:34 -08:00
2013-02-22 23:31:31 -05:00
2013-02-21 13:57:13 -08:00