[Qemu-commits] [qemu/qemu] 3a15cc: net: stellaris_enet: check packet length against r...

[GitHub]

  Branch: refs/heads/master
  Home:   https://github.com/qemu/qemu
  Commit: 3a15cc0e1ee7168db0782133d2607a6bfa422d66
      
https://github.com/qemu/qemu/commit/3a15cc0e1ee7168db0782133d2607a6bfa422d66
  Author: Prasad J Pandit <address@hidden>
  Date:   2016-04-11 (Mon, 11 Apr 2016)

  Changed paths:
    M hw/net/stellaris_enet.c

  Log Message:
  -----------
  net: stellaris_enet: check packet length against receive buffer

When receiving packets over Stellaris ethernet controller, it
uses receive buffer of size 2048 bytes. In case the controller
accepts large(MTU) packets, it could lead to memory corruption.
Add check to avoid it.

Reported-by: Oleksandr Bazhaniuk <address@hidden>
Signed-off-by: Prasad J Pandit <address@hidden>
Message-id: address@hidden
Reviewed-by: Peter Maydell <address@hidden>
Signed-off-by: Peter Maydell <address@hidden>


  Commit: dc1ffa66619b3661f17a309b0aa8d65d8d29583f
      
https://github.com/qemu/qemu/commit/dc1ffa66619b3661f17a309b0aa8d65d8d29583f
  Author: Peter Maydell <address@hidden>
  Date:   2016-04-11 (Mon, 11 Apr 2016)

  Changed paths:
    M hw/net/stellaris_enet.c

  Log Message:
  -----------
  Merge remote-tracking branch 'remotes/pmaydell/tags/pull-target-arm-20160411' 
into staging

target-arm queue:
 * stellaris_enet: don't overrun buffer if fed oversize packet

# gpg: Signature made Mon 11 Apr 2016 14:36:27 BST using RSA key ID 14360CDE
# gpg: Good signature from "Peter Maydell <address@hidden>"
# gpg:                 aka "Peter Maydell <address@hidden>"
# gpg:                 aka "Peter Maydell <address@hidden>"

* remotes/pmaydell/tags/pull-target-arm-20160411:
  net: stellaris_enet: check packet length against receive buffer

Signed-off-by: Peter Maydell <address@hidden>


Compare: https://github.com/qemu/qemu/compare/5144fe36056d...dc1ffa66619b