Re: [PATCH 2/5] usb/redir: avoid dynamic stack allocation (CVE-2021-3527)

2021-05-03 Thread Philippe Mathieu-Daudé
On 5/3/21 11:27 AM, Philippe Mathieu-Daudé wrote: > On 5/3/21 11:14 AM, Gerd Hoffmann wrote: >> Use autofree heap allocation instead. >> >> Signed-off-by: Gerd Hoffmann > > Fixes: 4f4321c11ff ("usb: use iovecs in USBPacket") > Reviewed-by: Philippe Mathieu-Daudé Hmm there is still another use:

Re: [PATCH 2/5] usb/redir: avoid dynamic stack allocation (CVE-2021-3527)

2021-05-03 Thread Philippe Mathieu-Daudé
On 5/3/21 11:14 AM, Gerd Hoffmann wrote: > Use autofree heap allocation instead. > > Signed-off-by: Gerd Hoffmann Fixes: 4f4321c11ff ("usb: use iovecs in USBPacket") Reviewed-by: Philippe Mathieu-Daudé > --- > hw/usb/redirect.c | 4 ++-- > 1 file changed, 2 insertions(+), 2 deletions(-) > >

[PATCH 2/5] usb/redir: avoid dynamic stack allocation (CVE-2021-3527)

2021-05-03 Thread Gerd Hoffmann
Use autofree heap allocation instead. Signed-off-by: Gerd Hoffmann --- hw/usb/redirect.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/hw/usb/redirect.c b/hw/usb/redirect.c index 17f06f34179a..db1a89a7cc92 100644 --- a/hw/usb/redirect.c +++ b/hw/usb/redirect.c @@ -818,7