Re: [Qemu-devel] [PATCHv2, DoS] slirp (arp): do not special-case bogus IP addresses

2014-06-11 Thread Jan Kiszka
On 2014-05-28 01:10, Edgar E. Iglesias wrote: > On Wed, May 14, 2014 at 01:22:25AM +, Edgar E. Iglesias wrote: >> On Wed, May 14, 2014 at 03:13:09AM +0200, Samuel Thibault wrote: >>> Do not special-case addresses with zero host part, as we do not >>> necessarily know how big it is, and the gues

Re: [Qemu-devel] [PATCHv2, DoS] slirp (arp): do not special-case bogus IP addresses

2014-06-08 Thread Edgar E. Iglesias
On Wed, May 14, 2014 at 03:13:09AM +0200, Samuel Thibault wrote: > Do not special-case addresses with zero host part, as we do not > necessarily know how big it is, and the guest can fake them anyway. > Silently avoid having 0.0.0.0 as a destination, however. > > Signed-off-by: Samuel Thibault I

Re: [Qemu-devel] [PATCHv2, DoS] slirp (arp): do not special-case bogus IP addresses

2014-05-27 Thread Edgar E. Iglesias
On Wed, May 14, 2014 at 01:22:25AM +, Edgar E. Iglesias wrote: > On Wed, May 14, 2014 at 03:13:09AM +0200, Samuel Thibault wrote: > > Do not special-case addresses with zero host part, as we do not > > necessarily know how big it is, and the guest can fake them anyway. > > Silently avoid having

Re: [Qemu-devel] [PATCHv2, DoS] slirp (arp): do not special-case bogus IP addresses

2014-05-13 Thread Edgar E. Iglesias
On Wed, May 14, 2014 at 03:13:09AM +0200, Samuel Thibault wrote: > Do not special-case addresses with zero host part, as we do not > necessarily know how big it is, and the guest can fake them anyway. > Silently avoid having 0.0.0.0 as a destination, however. > > Signed-off-by: Samuel Thibault R

[Qemu-devel] [PATCHv2, DoS] slirp (arp): do not special-case bogus IP addresses

2014-05-13 Thread Samuel Thibault
Do not special-case addresses with zero host part, as we do not necessarily know how big it is, and the guest can fake them anyway. Silently avoid having 0.0.0.0 as a destination, however. Signed-off-by: Samuel Thibault --- This is particularly bad actually, one can for instance simply do this i