devices: vhoost cpu->copy array overflow on tcp jumbo frame (65535 bytes) 98/22998/2
authorSteven Luong <sluong@cisco.com>
Wed, 23 Oct 2019 20:28:37 +0000 (13:28 -0700)
committerAndrew Yourtchenko <ayourtch@gmail.com>
Tue, 29 Oct 2019 10:01:02 +0000 (10:01 +0000)
commitabad677803bde8b8eed86a9ceecbc5f19d08e916
tree1fba9cd2a2392504371701d6bc6d6673a2afc868
parentb4c5f16889bccfce31b6007d61e7f5670179f645
devices: vhoost cpu->copy array overflow on tcp jumbo frame (65535 bytes)

We reserve 40 slots in cpu->copy array prior to copy out to avoid overflowing
the array. However, 40 is not enough for the jumbo frame because desceiptor
buffer len is likely at 1536. Change the reserve to 200 and add ASSERT to avoid
encountering the same problem in the future.

Type: fix

Signed-off-by: Steven Luong <sluong@cisco.com>
Change-Id: Ibf0c03c4b4f33e781d5be8679ccd6c3a4b4a646d
(cherry picked from commit 7331005c16d0e1499080899b2a0676a0cd945595)
src/vnet/devices/virtio/vhost_user_input.c
src/vnet/devices/virtio/vhost_user_output.c