[PATCH v2 2/2] [Security Check] vfio/pci: Refine Intel IGD cfg access

[Gao, Fred]

IGD cfg init only works for integrated GPU, not dGPU.

Change-Id: I2480bbb7dde992dadb87aa93e15f9bbb23488b1c
Signed-off-by: Gao, Fred <fred.gao at intel.com>
---
 drivers/vfio/pci/vfio_pci_igd.c | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/drivers/vfio/pci/vfio_pci_igd.c b/drivers/vfio/pci/vfio_pci_igd.c
index eff0d3d99832..9def2cdb4fef 100644
--- a/drivers/vfio/pci/vfio_pci_igd.c
+++ b/drivers/vfio/pci/vfio_pci_igd.c
@@ -273,9 +273,13 @@ int vfio_pci_igd_init(struct vfio_pci_device *vdev)
 	if (ret)
 		return ret;
 
-	ret = vfio_pci_igd_cfg_init(vdev);
-	if (ret)
-		return ret;
+	/* only access for Intel VGA device at address 00:02.0. */
+	if (vdev->pdev == pci_get_domain_bus_and_slot(
+						0, 0, PCI_DEVFN(0x2, 0))) {
+		ret = vfio_pci_igd_cfg_init(vdev);
+		if (ret)
+			return ret;
+	}
 
 	return 0;
 }
-- 
2.17.1