Patch Detail
get:
Show a patch.
patch:
Update a patch.
put:
Update a patch.
GET /api/1.0/patches/2197463/?format=api
{ "id": 2197463, "url": "http://patchwork.ozlabs.org/api/1.0/patches/2197463/?format=api", "project": { "id": 14, "url": "http://patchwork.ozlabs.org/api/1.0/projects/14/?format=api", "name": "QEMU Development", "link_name": "qemu-devel", "list_id": "qemu-devel.nongnu.org", "list_email": "qemu-devel@nongnu.org", "web_url": "", "scm_url": "", "webscm_url": "" }, "msgid": "<20260217214928.2970885-17-dmitry.osipenko@collabora.com>", "date": "2026-02-17T21:49:25", "name": "[v18,16/19] virtio-gpu: Validate hostmem mapping offset", "commit_ref": null, "pull_url": null, "state": "new", "archived": false, "hash": "728a83b608626ebb05d8088053f84df1e4be6923", "submitter": { "id": 83453, "url": "http://patchwork.ozlabs.org/api/1.0/people/83453/?format=api", "name": "Dmitry Osipenko", "email": "dmitry.osipenko@collabora.com" }, "delegate": null, "mbox": "http://patchwork.ozlabs.org/project/qemu-devel/patch/20260217214928.2970885-17-dmitry.osipenko@collabora.com/mbox/", "series": [ { "id": 492488, "url": "http://patchwork.ozlabs.org/api/1.0/series/492488/?format=api", "date": "2026-02-17T21:49:09", "name": "Support virtio-gpu DRM native context and MAP_FIXED API", "version": 18, "mbox": "http://patchwork.ozlabs.org/series/492488/mbox/" } ], "check": "pending", "checks": "http://patchwork.ozlabs.org/api/patches/2197463/checks/", "tags": {}, "headers": { "Return-Path": "<qemu-devel-bounces+incoming=patchwork.ozlabs.org@nongnu.org>", "X-Original-To": "incoming@patchwork.ozlabs.org", "Delivered-To": "patchwork-incoming@legolas.ozlabs.org", "Authentication-Results": [ "legolas.ozlabs.org;\n\tdkim=pass (1024-bit key;\n unprotected) header.d=collabora.com header.i=dmitry.osipenko@collabora.com\n header.a=rsa-sha256 header.s=zohomail header.b=lYnPqc9C;\n\tdkim-atps=neutral", "legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=nongnu.org\n (client-ip=209.51.188.17; helo=lists.gnu.org;\n envelope-from=qemu-devel-bounces+incoming=patchwork.ozlabs.org@nongnu.org;\n receiver=patchwork.ozlabs.org)" ], "Received": [ "from lists.gnu.org (lists.gnu.org [209.51.188.17])\n\t(using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits))\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4fFth23xrLz1xwC\n\tfor <incoming@patchwork.ozlabs.org>; Wed, 18 Feb 2026 08:53:54 +1100 (AEDT)", "from localhost ([::1] helo=lists1p.gnu.org)\n\tby lists.gnu.org with esmtp (Exim 4.90_1)\n\t(envelope-from <qemu-devel-bounces@nongnu.org>)\n\tid 1vsT0N-00026T-OJ; Tue, 17 Feb 2026 16:53:15 -0500", "from eggs.gnu.org ([2001:470:142:3::10])\n by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)\n (Exim 4.90_1) (envelope-from <dmitry.osipenko@collabora.com>)\n id 1vsT0L-0001cl-3h\n for qemu-devel@nongnu.org; Tue, 17 Feb 2026 16:53:13 -0500", "from sender4-pp-f112.zoho.com ([136.143.188.112])\n by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)\n (Exim 4.90_1) (envelope-from <dmitry.osipenko@collabora.com>)\n id 1vsT0J-0001iF-Hs\n for qemu-devel@nongnu.org; Tue, 17 Feb 2026 16:53:12 -0500", "by mx.zohomail.com with SMTPS id 1771365169942683.5270397556595;\n Tue, 17 Feb 2026 13:52:49 -0800 (PST)" ], "ARC-Seal": "i=1; a=rsa-sha256; t=1771365172; cv=none;\n d=zohomail.com; s=zohoarc;\n b=Wsm0QCQV8R0bMRhTIBamQs55FeJiomoskL7jrvHXJNVexcd4X6VL8wg/JxJp3xwJGgX2JCCmTjALjF6vB0lPL5luHJ1KsByHp9LzDxCO1y3QQcwdUFBhlRX76RSsyo0FfwJSw1FPzGDY0QC9zgR6qBB166j8fVXNIfHzHWm/Mbg=", "ARC-Message-Signature": "i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com;\n s=zohoarc; t=1771365172;\n h=Content-Transfer-Encoding:Cc:Cc:Date:Date:From:From:In-Reply-To:MIME-Version:Message-ID:References:Subject:Subject:To:To:Message-Id:Reply-To;\n bh=l3bUXmNXH6JSzxT94rsGuffA3s4Mcl9ThwiRJgBO7Ys=;\n b=c2DwzGi93cP+19rAPSd2YVHOfQVCin9u5EerMlNhMSD5gcxHOASMPz80wkxINBtnVUGiJTzZXLVTeydpWfOK9IYnfEm4uVYAaxq/sb/+HAn4CyyVumGR/h1Xvyt+NWZPC4EF1sDmHNkAmM/8ssnw/Kwtkwy2mWOQ16fdCIi2vfg=", "ARC-Authentication-Results": "i=1; mx.zohomail.com;\n dkim=pass header.i=collabora.com;\n spf=pass smtp.mailfrom=dmitry.osipenko@collabora.com;\n dmarc=pass header.from=<dmitry.osipenko@collabora.com>", "DKIM-Signature": "v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1771365172;\n s=zohomail; d=collabora.com; i=dmitry.osipenko@collabora.com;\n h=From:From:To:To:Cc:Cc:Subject:Subject:Date:Date:Message-ID:In-Reply-To:References:MIME-Version:Content-Transfer-Encoding:Message-Id:Reply-To;\n bh=l3bUXmNXH6JSzxT94rsGuffA3s4Mcl9ThwiRJgBO7Ys=;\n b=lYnPqc9CiH56ElKXnudVIRwaEwLfh6BMwiALOtPSVOOqR3/r/YRDnc5cR84RNcln\n 8nITD53dmTvvgvquPdOlz9pSBysbaOQryrsAU9Maz6cvC/G4HV+2HK2zWpvp+1dd6tD\n SO7EVkvOtvnXl9m8WTrqQ4bYf1sdhDwNGZwfDWMI=", "From": "Dmitry Osipenko <dmitry.osipenko@collabora.com>", "To": "Akihiko Odaki <odaki@rsg.ci.i.u-tokyo.ac.jp>,\n Huang Rui <ray.huang@amd.com>,\n =?utf-8?q?Marc-Andr=C3=A9_Lureau?= <marcandre.lureau@redhat.com>,\n\t=?utf-8?q?Philippe_Mathieu-Daud=C3=A9?= <philmd@linaro.org>,\n Gerd Hoffmann <kraxel@redhat.com>,\n =?utf-8?q?Alex_Benn=C3=A9e?= <alex.bennee@linaro.org>,\n Pierre-Eric Pelloux-Prayer <pierre-eric.pelloux-prayer@amd.com>,\n \"Michael S . Tsirkin\" <mst@redhat.com>, Paolo Bonzini <pbonzini@redhat.com>,\n Yiwei Zhang <zzyiwei@gmail.com>, Sergio Lopez Pascual <slp@redhat.com>", "Cc": "Gert Wollny <gert.wollny@collabora.com>, qemu-devel@nongnu.org,\n Gurchetan Singh <gurchetansingh@chromium.org>, Alyssa Ross <hi@alyssa.is>,\n\t=?utf-8?q?Roger_Pau_Monn=C3=A9?= <roger.pau@citrix.com>,\n Alex Deucher <alexander.deucher@amd.com>,\n Stefano Stabellini <stefano.stabellini@amd.com>, =?utf-8?q?Christian_K?=\n\t=?utf-8?q?=C3=B6nig?= <christian.koenig@amd.com>,\n Xenia Ragiadakou <xenia.ragiadakou@amd.com>,\n Honglei Huang <honglei1.huang@amd.com>, Julia Zhang <julia.zhang@amd.com>,\n Chen Jiqian <Jiqian.Chen@amd.com>, Rob Clark <robdclark@gmail.com>,\n Robert Beckett <bob.beckett@collabora.com>", "Subject": "[PATCH v18 16/19] virtio-gpu: Validate hostmem mapping offset", "Date": "Wed, 18 Feb 2026 00:49:25 +0300", "Message-ID": "<20260217214928.2970885-17-dmitry.osipenko@collabora.com>", "X-Mailer": "git-send-email 2.52.0", "In-Reply-To": "<20260217214928.2970885-1-dmitry.osipenko@collabora.com>", "References": "<20260217214928.2970885-1-dmitry.osipenko@collabora.com>", "MIME-Version": "1.0", "Content-Transfer-Encoding": "8bit", "X-ZohoMailClient": "External", "Received-SPF": "pass client-ip=136.143.188.112;\n envelope-from=dmitry.osipenko@collabora.com; helo=sender4-pp-f112.zoho.com", "X-Spam_score_int": "-20", "X-Spam_score": "-2.1", "X-Spam_bar": "--", "X-Spam_report": "(-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,\n DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,\n RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001,\n RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001,\n SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no", "X-Spam_action": "no action", "X-BeenThere": "qemu-devel@nongnu.org", "X-Mailman-Version": "2.1.29", "Precedence": "list", "List-Id": "qemu development <qemu-devel.nongnu.org>", "List-Unsubscribe": "<https://lists.nongnu.org/mailman/options/qemu-devel>,\n <mailto:qemu-devel-request@nongnu.org?subject=unsubscribe>", "List-Archive": "<https://lists.nongnu.org/archive/html/qemu-devel>", "List-Post": "<mailto:qemu-devel@nongnu.org>", "List-Help": "<mailto:qemu-devel-request@nongnu.org?subject=help>", "List-Subscribe": "<https://lists.nongnu.org/mailman/listinfo/qemu-devel>,\n <mailto:qemu-devel-request@nongnu.org?subject=subscribe>", "Errors-To": "qemu-devel-bounces+incoming=patchwork.ozlabs.org@nongnu.org", "Sender": "qemu-devel-bounces+incoming=patchwork.ozlabs.org@nongnu.org" }, "content": "Check hostmem mapping boundaries originated from guest.\n\nSuggested-by: Akihiko Odaki <odaki@rsg.ci.i.u-tokyo.ac.jp>\nSigned-off-by: Dmitry Osipenko <dmitry.osipenko@collabora.com>\n---\n hw/display/virtio-gpu-virgl.c | 10 ++++++++++\n 1 file changed, 10 insertions(+)", "diff": "diff --git a/hw/display/virtio-gpu-virgl.c b/hw/display/virtio-gpu-virgl.c\nindex b8e3c7e9aee9..77fe5cd4ecd8 100644\n--- a/hw/display/virtio-gpu-virgl.c\n+++ b/hw/display/virtio-gpu-virgl.c\n@@ -791,6 +791,7 @@ static void virgl_cmd_resource_map_blob(VirtIOGPU *g,\n struct virtio_gpu_resource_map_blob mblob;\n struct virtio_gpu_virgl_resource *res;\n struct virtio_gpu_resp_map_info resp;\n+ VirtIOGPUBase *b = VIRTIO_GPU_BASE(g);\n int ret;\n \n VIRTIO_GPU_FILL_CMD(mblob);\n@@ -804,6 +805,15 @@ static void virgl_cmd_resource_map_blob(VirtIOGPU *g,\n return;\n }\n \n+ if (mblob.offset + res->base.blob_size > b->conf.hostmem ||\n+ mblob.offset + res->base.blob_size < mblob.offset) {\n+ qemu_log_mask(LOG_GUEST_ERROR,\n+ \"%s: failed to map virgl resource: invalid offset\\n\",\n+ __func__);\n+ cmd->error = VIRTIO_GPU_RESP_ERR_INVALID_PARAMETER;\n+ return;\n+ }\n+\n ret = virtio_gpu_virgl_map_resource_blob(g, res, mblob.offset);\n if (ret) {\n cmd->error = VIRTIO_GPU_RESP_ERR_UNSPEC;\n", "prefixes": [ "v18", "16/19" ] }