KVM: nVMX: really fix the size checks on KVM_SET_NESTED_STATE
authorPaolo Bonzini <pbonzini@redhat.com>
Mon, 20 May 2019 09:55:36 +0000 (11:55 +0200)
committerPaolo Bonzini <pbonzini@redhat.com>
Fri, 24 May 2019 19:27:02 +0000 (21:27 +0200)
commitdb80927ea1977a845230a161df643b48fd1e1ea4
tree0ed4f7d6c17c0610b2d1306ee6cc3dd4def070fe
parent6bff2a3dc9ba6ef1054da1094554cc0c87f377ed
KVM: nVMX: really fix the size checks on KVM_SET_NESTED_STATE

The offset for reading the shadow VMCS is sizeof(*kvm_state)+VMCS12_SIZE,
so the correct size must be that plus sizeof(*vmcs12).  This could lead
to KVM reading garbage data from userspace and not reporting an error,
but is otherwise not sensitive.

Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
arch/x86/kvm/vmx/nested.c