Prasad J Pandit
837f21aacf
net: pcnet: add check to validate receive data size(CVE-2015-7504)
...
In loopback mode, pcnet_receive routine appends CRC code to the
receive buffer. If the data size given is same as the buffer size,
the appended CRC code overwrites 4 bytes after s->buffer. Added a
check to avoid that.
Reported by: Qinghao Tang <luodalongde@gmail.com>
Cc: qemu-stable@nongnu.org
Reviewed-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Signed-off-by: Jason Wang <jasowang@redhat.com>
2015-12-07 21:43:48 +08:00
..
2015-10-20 14:59:04 +01:00
2015-07-27 22:44:47 +03:00
2015-09-19 16:40:15 +02:00
2015-10-27 12:00:50 +00:00
2015-10-19 09:03:53 +02:00
2015-10-23 18:18:24 +02:00
2015-09-25 14:56:22 +02:00
2015-10-27 13:16:21 +00:00
2015-09-19 16:40:15 +02:00
2015-10-02 16:22:02 -03:00
2015-09-25 12:04:43 +02:00
2015-10-20 09:26:36 +02:00
2015-09-14 16:13:16 +01:00
2015-10-27 15:59:46 +00:00
2015-10-27 15:59:46 +00:00
2015-10-26 11:32:24 +00:00
2015-10-23 12:35:18 +11:00
2015-10-23 12:35:17 +11:00
2015-10-27 15:59:46 +00:00
2015-02-26 12:42:16 +01:00
2015-10-22 14:39:09 +03:00
2015-09-25 12:04:43 +02:00
2015-09-25 12:04:43 +02:00
2015-10-22 14:34:48 +03:00
2015-09-25 12:04:43 +02:00
2015-09-25 21:52:30 +01:00
2015-10-27 15:59:46 +00:00
2015-09-25 12:04:43 +02:00
2015-12-07 21:43:48 +08:00
2015-10-23 12:35:18 +11:00
2015-09-25 21:52:30 +01:00
2015-10-24 18:03:18 +02:00
2015-06-23 22:58:36 +02:00
2015-10-23 12:35:18 +11:00
2015-10-09 15:25:56 +02:00
2015-10-23 12:38:28 +11:00
2015-10-21 12:21:30 +02:00
2015-10-23 18:18:24 +02:00
2015-10-12 11:17:45 +01:00
2015-09-19 16:40:15 +02:00
2015-09-07 10:39:28 +01:00
2015-09-25 12:04:44 +02:00
2015-09-25 12:04:44 +02:00
2015-09-07 10:39:27 +01:00
2015-10-27 15:59:46 +00:00
2015-09-11 10:21:38 +03:00
2015-09-25 12:04:44 +02:00
2015-09-19 16:40:15 +02:00
2015-10-23 18:18:23 +02:00
2015-10-19 10:13:07 +02:00
2015-10-23 10:24:08 +01:00
2015-09-25 14:52:17 +02:00
2015-10-26 11:32:18 +00:00
2015-09-19 16:40:15 +02:00
2015-10-21 21:28:33 +03:00
2015-08-13 14:08:30 +03:00