]> git.ipfire.org Git - thirdparty/qemu.git/commit
projects / thirdparty / qemu.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8561109) | patch
rtl8139: check IP Total Length field (CVE-2015-5165)
authorStefan Hajnoczi <stefanha@redhat.com>
Wed, 15 Jul 2015 16:34:40 +0000 (17:34 +0100)
committerMichael Roth <mdroth@linux.vnet.ibm.com>
Tue, 4 Aug 2015 17:33:48 +0000 (12:33 -0500)
commitb7a197c39e4b2099f25d2137e8d73c53c37b92c6
tree5bdba0a81b3e95fe5bf2ce478b2f0fcdc66da151tree
parent85611098ff39ffaa8d78c02bb16eb2c5355d9899commit | diff
rtl8139: check IP Total Length field (CVE-2015-5165)

The IP Total Length field includes the IP header and data.  Make sure it
is valid and does not exceed the Ethernet payload size.

Reported-by: 朱东海(启路) <donghai.zdh@alibaba-inc.com>
Reviewed-by: Jason Wang <jasowang@redhat.com>
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
(cherry picked from commit c6296ea88df040054ccd781f3945fe103f8c7c17)
Signed-off-by: Michael Roth <mdroth@linux.vnet.ibm.com>
hw/net/rtl8139.c diff | blob | blame | history
Mirror of https://git.qemu.org/git/qemu.git