hw/net/virtio-net.c: fix crash in iov_copy()
authorDmitry Frolov <frolov@swemel.ru>
Thu, 13 Jun 2024 14:35:30 +0000 (17:35 +0300)
committerMichael S. Tsirkin <mst@redhat.com>
Mon, 1 Jul 2024 21:16:05 +0000 (17:16 -0400)
commitd4f471eb7e562c2cc398448a1c1e7ee838ec30bd
tree3cbfe19e9ad14ed376139d13f33217b551dc22d2
parent7c211eb078c42146ee9a441cc028fbc4c378ef5a
hw/net/virtio-net.c: fix crash in iov_copy()

A crash found while fuzzing device virtio-net-socket-check-used.
Assertion "offset == 0" in iov_copy() fails if less than guest_hdr_len bytes
were transmited.

Signed-off-by: Dmitry Frolov <frolov@swemel.ru>
Message-Id: <20240613143529.602591-2-frolov@swemel.ru>
Reviewed-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
hw/net/virtio-net.c