[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Qemu-devel] [PATCH] Out off array access in usb-net
|
From: |
Markus Armbruster |
|
Subject: |
Re: [Qemu-devel] [PATCH] Out off array access in usb-net |
|
Date: |
Tue, 09 Nov 2010 11:16:43 +0100 |
|
User-agent: |
Gnus/5.13 (Gnus v5.13) Emacs/23.1 (gnu/linux) |
Gleb Natapov <address@hidden> writes:
> On Tue, Nov 09, 2010 at 10:30:54AM +0100, Markus Armbruster wrote:
>> Gleb Natapov <address@hidden> writes:
>>
>> > Properly check array bounds before accessing array element.
>>
>> Impact?
>>
> Gapping security hole for those unfortunate enough to use usb-net?
Doesn't that bit of information belong in the commit message.
>> Apply to stable as well?
>>
> Definitely. Actually for me Windows7 crashed when usb-net is present.
And that as well.
Good catch!
Re: [Qemu-devel] [PATCH] Out off array access in usb-net, Anthony Liguori, 2010/11/16