-
Mauro Matteo Cascella authored
An assertion failure issue was found in the code that processes network packets while adding data fragments into the packet context. It could be abused by a malicious guest to abort the QEMU process on the host. This patch replaces the affected assert() with a conditional statement, returning false if the current data fragment exceeds max_raw_frags. Reported-by:
Alexander Bulekov <alxndr@bu.edu>
Reported-by:
Ziming Zhang <ezrakiez@gmail.com>
Reviewed-by:
Dmitry Fleytman <dmitry.fleytman@gmail.com>
Signed-off-by:
Mauro Matteo Cascella <mcascell@redhat.com>
Signed-off-by:
Jason Wang <jasowang@redhat.com>Mauro Matteo Cascella authoredAn assertion failure issue was found in the code that processes network packets while adding data fragments into the packet context. It could be abused by a malicious guest to abort the QEMU process on the host. This patch replaces the affected assert() with a conditional statement, returning false if the current data fragment exceeds max_raw_frags. Reported-by:
Alexander Bulekov <alxndr@bu.edu>
Reported-by:
Ziming Zhang <ezrakiez@gmail.com>
Reviewed-by:
Dmitry Fleytman <dmitry.fleytman@gmail.com>
Signed-off-by:
Mauro Matteo Cascella <mcascell@redhat.com>
Signed-off-by:
Jason Wang <jasowang@redhat.com>
Loading