]> git.ipfire.org Git - thirdparty/qemu.git/commit
nbd/client: fix drop_sync [CVE-2017-2630]
authorVladimir Sementsov-Ogievskiy <vsementsov@virtuozzo.com>
Tue, 7 Mar 2017 15:16:27 +0000 (09:16 -0600)
committerPaolo Bonzini <pbonzini@redhat.com>
Tue, 14 Mar 2017 13:41:19 +0000 (14:41 +0100)
commit2563c9c6b8670400c48e562034b321a7cf3d9a85
tree4c24cc4bb13b7f4748f1f659fd88c7c2ba13d9fa
parentb31f84126215e3fd4b8acbc3083ae30d407329e8
nbd/client: fix drop_sync [CVE-2017-2630]

Comparison symbol is misused. It may lead to memory corruption.
Introduced in commit 7d3123e.

Signed-off-by: Vladimir Sementsov-Ogievskiy <vsementsov@virtuozzo.com>
Message-Id: <20170203154757.36140-6-vsementsov@virtuozzo.com>
[eblake: add CVE details, update conditional]
Signed-off-by: Eric Blake <eblake@redhat.com>
Reviewed-by: Marc-André Lureau <marcandre.lureau@redhat.com>
Message-Id: <20170307151627.27212-1-eblake@redhat.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
nbd/client.c