RE: [Pv-drivers] vmci: read overrun bug in dg_dispatch_as_host() (drivers/misc/vmw_vmci/vmci_datagram.c)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi David,

> This provides an upper bound of 69,632 bytes, but it doesn’t relate the payload size to
> the actual size of the user-supplied datagram. I think there should be a comparison
> with 'send_info.len’ in vmci_host_do_send_datagram().

Thanks so much for finding this and bringing it to our attention! I've just sent out
a patch in a separate email (cc'd you) that hopefully addresses this. If you find any
others, we would of course be happy to fix them. We do appreciate extra eyes.

Kind regards,
- Andy
_______________________________________________
Virtualization mailing list
Virtualization@xxxxxxxxxxxxxxxxxxxxxxxxxx
https://lists.linuxfoundation.org/mailman/listinfo/virtualization





[Index of Archives]     [KVM Development]     [Libvirt Development]     [Libvirt Users]     [CentOS Virtualization]     [Netdev]     [Ethernet Bridging]     [Linux Wireless]     [Kernel Newbies]     [Security]     [Linux for Hams]     [Netfilter]     [Bugtraq]     [Yosemite Forum]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux Admin]     [Samba]

  Powered by Linux