remarkable-linux/virt/kvm
Michael S. Tsirkin 6bbfb26531 KVM: fix irqfd assign/deassign race
I think I see the following (theoretical) race:

During irqfd assign, we drop irqfds lock before we
schedule inject work. Therefore, deassign running
on another CPU could cause shutdown and flush to run
before inject, causing user after free in inject.

A simple fix it to schedule inject under the lock.

Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Acked-by: Gregory Haskins <ghaskins@novell.com>
Signed-off-by: Marcelo Tosatti <mtosatti@redhat.com>
2010-09-23 11:31:51 -03:00
..
assigned-dev.c KVM: Fix unused but set warnings 2010-08-01 10:46:29 +03:00
coalesced_mmio.c KVM: Update Red Hat copyrights 2010-08-01 10:35:51 +03:00
coalesced_mmio.h KVM: Simplify coalesced mmio initialization 2010-03-01 12:35:41 -03:00
eventfd.c KVM: fix irqfd assign/deassign race 2010-09-23 11:31:51 -03:00
ioapic.c KVM: Convert mask notifiers to use irqchip/pin instead of gsi 2010-08-02 06:40:39 +03:00
ioapic.h KVM: convert ioapic lock to spinlock 2010-05-13 01:23:55 -03:00
iodev.h KVM: remove in_range from io devices 2009-09-10 08:33:05 +03:00
iommu.c KVM: Use u64 for frame data types 2010-08-02 06:39:44 +03:00
irq_comm.c KVM: Convert mask notifiers to use irqchip/pin instead of gsi 2010-08-02 06:40:39 +03:00
Kconfig KVM: Add KVM_MMIO kconfig item 2010-03-01 12:35:41 -03:00
kvm_main.c KVM: x86: Perform hardware_enable in CPU_STARTING callback 2010-09-09 13:48:16 -03:00