Re: [Qemu-devel] [PATCH v4 1/8] nbd/client: fix drop_sync [CVE-2017-2630]

2017-02-21 Thread Marc-André Lureau
On Tue, Feb 21, 2017 at 6:49 AM Eric Blake wrote: > From: Vladimir Sementsov-Ogievskiy > > Comparison symbol is misused. It may lead to memory corruption. > Introduced in commit 7d3123e. > > Signed-off-by: Vladimir Sementsov-Ogievskiy > Message-Id: <20170203154757.36140-6-vsement...@virtuozzo.c

[Qemu-devel] [PATCH v4 1/8] nbd/client: fix drop_sync [CVE-2017-2630]

2017-02-20 Thread Eric Blake
From: Vladimir Sementsov-Ogievskiy Comparison symbol is misused. It may lead to memory corruption. Introduced in commit 7d3123e. Signed-off-by: Vladimir Sementsov-Ogievskiy Message-Id: <20170203154757.36140-6-vsement...@virtuozzo.com> [eblake: add CVE details] Signed-off-by: Eric Blake --- nb