[0/2] CEV fixes for virtio-crypto

Message

zhenwei pi Aug. 3, 2023, 2:43 a.m. UTC

Hi Michael, Lei,

Yiming Tao, Yongkang Jia, Xiao Lei(from Zhejiang University) reported
issuses and CVEs in the past days.

This series fixes a CVE and a BUG for virtio-crypto/cryptodev.

Zhenwei Pi (2):
  virtio-crypto: verify src&dst buffer length for sym request
  cryptodev: Handle unexpected request to avoid crash

 backends/cryptodev.c      | 10 ++++++++++
 hw/virtio/virtio-crypto.c |  5 +++++
 2 files changed, 15 insertions(+)