[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [QEMU-SECURITY] ide: fix assertion in ide_dma_cb() to prevent qemu D
Re: [QEMU-SECURITY] ide: fix assertion in ide_dma_cb() to prevent qemu DoS from quest
Thu, 7 Nov 2019 01:01:40 +0300
Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.1.1
On 06.11.2019 15:08, Michael S. Tsirkin wrote:
> On Wed, Nov 06, 2019 at 01:17:51PM +0300, Alexander Popov wrote:
>> On 27.07.2019 00:09, Alexander Popov wrote:
>>> On 26.07.2019 2:25:03 GMT+02:00, John Snow <address@hidden> wrote:
>>>> Oh, this is fun.
>>>> I can worry about a proper fix for 4.2+.
>>> Hello John,
>>> Thanks for your letter.
>>> I double-checked the git history and mailing list, I'm still sure
>>> that my fix for this assertion is correct.
>> I'm pointing politely to this issue again.
>> It crashes qemu during syzkaller fuzzing.
>> It's really annoying to manually apply the fix against it to qemu.
> I understand. Maybe the fuzzer can be taught to skip the
> specific issue for now?
Michael, thanks for your reply.
Yes, of course. You just forbid the fuzzer to use /dev/sg in the guest.
But I would rather fix the issue.