]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
xen/netfront: don't read data from request on the ring page
authorJuergen Gross <jgross@suse.com>
Mon, 29 Nov 2021 09:38:28 +0000 (10:38 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 1 Dec 2021 08:27:44 +0000 (09:27 +0100)
commit26509bb5dd2fc9177fe612a778cc4b8f305ea89f
treeee2dd10c73597d2c5afeed148b2e7669fc36f396
parente7d1024f5b19e76ae7ff6789998cefb91c2b6a61
xen/netfront: don't read data from request on the ring page

commit 162081ec33c2686afa29d91bf8d302824aa846c7 upstream.

In order to avoid a malicious backend being able to influence the local
processing of a request build the request locally first and then copy
it to the ring page. Any reading from the request influencing the
processing in the frontend needs to be done on the local instance.

Signed-off-by: Juergen Gross <jgross@suse.com>
Reviewed-by: Jan Beulich <jbeulich@suse.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/net/xen-netfront.c