]> xenbits.xensource.com Git - people/liuw/libxenctrl-split/qemu-xen-traditional.git/commit
e1000: Discard packets that are too long if !SBP and !LPE
authorMichael Contreras <michael@inetric.com>
Mon, 3 Dec 2012 04:11:22 +0000 (20:11 -0800)
committerIan Jackson <Ian.Jackson@eu.citrix.com>
Wed, 16 Jan 2013 14:05:57 +0000 (14:05 +0000)
commit4c2cae2a882db4d2a231b27b3b31a5bbec6dacbf
treee1ad77336242078b54ded778224b682f55dc22f3
parent6a0cf3786f1964fdf5a17f88f26cb499f4e89c81
e1000: Discard packets that are too long if !SBP and !LPE

The e1000_receive function for the e1000 needs to discard packets longer than
1522 bytes if the SBP and LPE flags are disabled. The linux driver assumes
this behavior and allocates memory based on this assumption.

Signed-off-by: Michael Contreras <michael@inetric.com>
Signed-off-by: Anthony Liguori <aliguori@us.ibm.com>
[ This is a security vulnerability, CVE-2012-6075 / XSA-41. ]
hw/e1000.c