Peter Maydell <peter.mayd...@linaro.org> 于2018年12月6日周四 下午6:46写道：
> On Thu, 6 Dec 2018 at 10:34, li qiang <liq...@outlook.com> wrote: > > > > > > 在 2018/12/6 18:16, Peter Maydell 写道: > > > On Thu, 6 Dec 2018 at 09:10, li qiang<liq...@outlook.com> wrote: > > >> Oh... Finally another one find this..... > > >> > > >> I've already found this. This is very a serious security issue. > > > If you find a security issue, we would appreciate it if > > > you let us know, rather than just waiting to see if > > > anybody else notices it... > > > > I'm sorry for that. > > > > To be perfect, I'm currently trying to write an exp for i440fx. > > > > I intend report it after completing it. > > Is that an exploit for this bug, or for some other bug? Just for this. But for now still no exp for i440fx. > It's OK (and we recommend) reporting security issues as > "I think this is probably exploitable"; we don't require > a proof-of-concept for security bugs. > Yes, I know that, but as this issue is so good to write a perfect exploit so I want to do more. I know the qemu planing and know this issue doesn't affect anyone. I want to do a perfect work. Thanks, Li Qiang > > thanks > -- PMM >
