| commit | 4769886baf39b6a307eb8f9e39848823ca6c5939 | [log] [tgz] |
|---|---|---|
| author | Dan Carpenter <dan.carpenter@oracle.com> | Wed May 10 22:43:17 2017 +0300 |
| committer | Radim Krčmář <rkrcmar@redhat.com> | Mon May 15 16:08:56 2017 +0200 |
| tree | 874f4adce443e6db0abd48b469cbb91398e57d87 | |
| parent | 65acb891aaeb9294ebd06beb6138278b2331fec0 [diff] |
kvm: nVMX: off by one in vmx_write_pml_buffer()
There are PML_ENTITY_NUM elements in the pml_address[] array so the >
should be >= or we write beyond the end of the array when we do:
pml_address[vmcs12->guest_pml_index--] = gpa;
Fixes: c5f983f6e845 ("nVMX: Implement emulated Page Modification Logging")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Radim Krčmář <rkrcmar@redhat.com>