vhost: fix possible denial of service by leaking FDs
authorMaxime Coquelin <maxime.coquelin@redhat.com>
Tue, 3 Sep 2019 15:34:22 +0000 (17:34 +0200)
committerDavid Marchand <david.marchand@redhat.com>
Tue, 12 Nov 2019 11:21:20 +0000 (12:21 +0100)
commitbf472259dde6d9c4dd3ebad2c2b477a168c6e021
tree2d9b7558078abac3848462e4d70c8628339b98c3
parent612e17cf6d7b2bf05a687d8a9ba7be582a744e50
vhost: fix possible denial of service by leaking FDs

A malicious Vhost-user master could send in loop hand-crafted
vhost-user messages containing more file descriptors the
vhost-user slave expects. Doing so causes the application using
the vhost-user library to run out of FDs.

This issue has been assigned CVE-2019-14818

Fixes: 8f972312b8f4 ("vhost: support vhost-user")

Signed-off-by: Maxime Coquelin <maxime.coquelin@redhat.com>
lib/librte_vhost/vhost_user.c