Re: [PATCH v9 00/17] Introduce VDUSE - vDPA Device in Userspace

From: Liuxiangdong
Date: Wed Dec 15 2021 - 05:11:10 EST


Hi, yongji.

In vduse patches serial[1], you said "The support for other device types
can be added after the security issue of corresponding device driver
is clarified or fixed in the future."

What does this "security issue" mean?

[1]https://lore.kernel.org/all/20210831103634.33-1-xieyongji@xxxxxxxxxxxxx/

Do you mean that vduse device is untrusted, so we should check config or data transferred
from vduse to virtio module? Or something others?
Because I found you added some validation in virtio module just like this patch[2].

[2]https://lore.kernel.org/lkml/20210531135852.113-1-xieyongji@xxxxxxxxxxxxx/

Thanks!
Xiangdong Liu