]> xenbits.xensource.com Git - qemu-upstream-4.3-testing.git/commit
projects / qemu-upstream-4.3-testing.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e377201) | patch
virtio: validate config_len on load
authorMichael S. Tsirkin <mst@redhat.com>
Wed, 4 Mar 2015 17:14:22 +0000 (17:14 +0000)
committerStefano Stabellini <stefano.stabellini@eu.citrix.com>
Thu, 5 Mar 2015 13:21:56 +0000 (13:21 +0000)
commitccecdd20c20937f104682ebc5af3c72dc120eb35
tree2cbc78a6fccd0ed835491a719ed2f3cf52cc51cdtree
parente37720189aee0c5a4dba1499d7f0ad220f08c33dcommit | diff
virtio: validate config_len on load

Malformed input can have config_len in migration stream
exceed the array size allocated on destination, the
result will be heap overflow.

To fix, that config_len matches on both sides.

CVE-2014-0182

Reported-by: "Dr. David Alan Gilbert" <dgilbert@redhat.com>
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Juan Quintela <quintela@redhat.com>
Signed-off-by: Stefano Stabellini <stefano.stabellini@eu.citrix.com>
hw/virtio.c diff | blob | history
Obsolete Upstream Qemu based repository for xen-unstable