search

machyve / xhyve

xhyve, a lightweight OS X virtualization solution
Other
6.44k stars 353 forks source link

Avoid integer overflow in xh_vm_map_gpa() #125

Closed dwoz closed 5 years ago

dwoz commented 7 years ago

This is related to FreeBSD-SA-16:38.bhyve[0] AKA CVE-2016-1889 which was discovered by Felix Wilhelm. In the context of hyperkit the code in question runs as an unprivileged user.

Thanks to Gleb Smirnoff and the FreeBSD security team for advanced notice on this issue.

[0] https://lists.freebsd.org/pipermail/freebsd-announce/2016-December/001773.html