]> xenbits.xensource.com Git - qemu-xen-4.2-testing.git/commit
e1000: Discard packets that are too long if !SBP and !LPE
authorMichael Contreras <michael@inetric.com>
Mon, 3 Dec 2012 04:11:22 +0000 (20:11 -0800)
committerIan Jackson <Ian.Jackson@eu.citrix.com>
Wed, 16 Jan 2013 14:11:07 +0000 (14:11 +0000)
commit48d332ba8ef0bd9754b9d16f9e5629b00f85d735
treee1ad77336242078b54ded778224b682f55dc22f3
parent6f5e128677e2d5795cf1ade4080fb69d5e442887
e1000: Discard packets that are too long if !SBP and !LPE

The e1000_receive function for the e1000 needs to discard packets longer than
1522 bytes if the SBP and LPE flags are disabled. The linux driver assumes
this behavior and allocates memory based on this assumption.

Signed-off-by: Michael Contreras <michael@inetric.com>
Signed-off-by: Anthony Liguori <aliguori@us.ibm.com>
[ This is a security vulnerability, CVE-2012-6075 / XSA-41. ]
(cherry picked from commit 4c2cae2a882db4d2a231b27b3b31a5bbec6dacbf)
hw/e1000.c