Re: [Qemu-devel] [PATCH 0/1] Add check for header length in virtio-net-tx

2019-07-16 Thread Michael S. Tsirkin
On Tue, Jul 16, 2019 at 03:38:00AM +, Oleinik, Alexander wrote: > While fuzzing the virtio-net tx vq, I ran into an assertion failure due > to iov_copy offsets larger than the total iov size. Though there is > a check to cover this, it does not execute when !n->has_vnet_hdr. This > patch tries

[Qemu-devel] [PATCH 0/1] Add check for header length in virtio-net-tx

2019-07-15 Thread Oleinik, Alexander
While fuzzing the virtio-net tx vq, I ran into an assertion failure due to iov_copy offsets larger than the total iov size. Though there is a check to cover this, it does not execute when !n->has_vnet_hdr. This patch tries to fix this. The call stack for the assertion failure: #8 in __assert_fai