Re: [Qemu-devel] [PATCH for 2.5 2/2] pcnet: fix rx buffer overflow(CVE-2015-7512)

2015-11-30 Thread Jason Wang
On 11/30/2015 06:46 PM, Michael S. Tsirkin wrote: > On Mon, Nov 30, 2015 at 03:38:23PM +0800, Jason Wang wrote: >> Backends could provide a packet whose length is greater than buffer >> size. Check for this and truncate the packet to avoid rx buffer >> overflow in this case. >> >> Cc: Prasad J Pa

Re: [Qemu-devel] [PATCH for 2.5 2/2] pcnet: fix rx buffer overflow(CVE-2015-7512)

2015-11-30 Thread Michael S. Tsirkin
On Mon, Nov 30, 2015 at 03:38:23PM +0800, Jason Wang wrote: > Backends could provide a packet whose length is greater than buffer > size. Check for this and truncate the packet to avoid rx buffer > overflow in this case. > > Cc: Prasad J Pandit > Cc: qemu-sta...@nongnu.org > Signed-off-by: Jason

[Qemu-devel] [PATCH for 2.5 2/2] pcnet: fix rx buffer overflow(CVE-2015-7512)

2015-11-29 Thread Jason Wang
Backends could provide a packet whose length is greater than buffer size. Check for this and truncate the packet to avoid rx buffer overflow in this case. Cc: Prasad J Pandit Cc: qemu-sta...@nongnu.org Signed-off-by: Jason Wang --- hw/net/pcnet.c | 6 ++ 1 file changed, 6 insertions(+) dif