]> git.ipfire.org Git - thirdparty/qemu.git/commit
rtl8139: check IP Header Length field (CVE-2015-5165)
authorStefan Hajnoczi <stefanha@redhat.com>
Wed, 15 Jul 2015 16:32:32 +0000 (17:32 +0100)
committerMichael Roth <mdroth@linux.vnet.ibm.com>
Tue, 4 Aug 2015 17:33:42 +0000 (12:33 -0500)
commit85611098ff39ffaa8d78c02bb16eb2c5355d9899
tree3fba38f9f8de02c981716996fd375575a8663836
parentce4f451bbba8edcd2418cfce434b096602248ab3
rtl8139: check IP Header Length field (CVE-2015-5165)

The IP Header Length field was only checked in the IP checksum case, but
is used in other cases too.

Reported-by: 朱东海(启路) <donghai.zdh@alibaba-inc.com>
Reviewed-by: Jason Wang <jasowang@redhat.com>
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
(cherry picked from commit 03247d43c577dfea8181cd40177ad5ba77c8db76)
Signed-off-by: Michael Roth <mdroth@linux.vnet.ibm.com>
hw/net/rtl8139.c