[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [PATCH] net: check payload length limit for all frames
From: |
Li Qiang |
Subject: |
Re: [PATCH] net: check payload length limit for all frames |
Date: |
Mon, 20 Jul 2020 21:20:17 +0800 |
P J P <ppandit@redhat.com> 于2020年7月20日周一 下午8:57写道:
>
> +-- On Mon, 20 Jul 2020, Li Qiang wrote --+
> | This seems is the same issue as LP#1886362 . Look at the free path. Here the
> | 'e1000e_write_to_rx_buffers' trigger DMA and then go to address space
> | dispatch. So the DMA is not RAM but a MMIO range. Then we go to another send
> | path, and in that we frees the 'iov'.
>
> Cool. Thanks so much for the confirmation Li.
>
> | Alex do you tried my patch to solve LP#1886362 ? I have tried it and it
> | seems no this UAF triggered.
>
> He mentioned that your patch fixes both issues:
> -> https://lists.gnu.org/archive/html/qemu-devel/2020-07/msg05367.html
Ok, then let's focus that patch.
Thanks,
Li Qiang
> ...
> > On the other hand, I cannot reproduce either issue with Li's patch:
> > Message-Id: <20200716161453.61295-1-liq3ea@163.com>
>
>
> Thank you.
> --
> Prasad J Pandit / Red Hat Product Security Team
> 8685 545E B54C 486B C6EB 271E E285 8B5A F050 DE8D
>
- Re: [PATCH] net: check payload length limit for all frames, (continued)
- Re: [PATCH] net: check payload length limit for all frames, Alexander Bulekov, 2020/07/16
- Re: [PATCH] net: check payload length limit for all frames, Jason Wang, 2020/07/16
- Re: [PATCH] net: check payload length limit for all frames, P J P, 2020/07/17
- Re: [PATCH] net: check payload length limit for all frames, Jason Wang, 2020/07/17
- Re: [PATCH] net: check payload length limit for all frames, P J P, 2020/07/17
- Re: [PATCH] net: check payload length limit for all frames, Li Qiang, 2020/07/17
- Re: [PATCH] net: check payload length limit for all frames, P J P, 2020/07/19
- Re: [PATCH] net: check payload length limit for all frames, Alexander Bulekov, 2020/07/19
- Re: [PATCH] net: check payload length limit for all frames, Li Qiang, 2020/07/20
- Re: [PATCH] net: check payload length limit for all frames, P J P, 2020/07/20
- Re: [PATCH] net: check payload length limit for all frames,
Li Qiang <=
- Re: [PATCH] net: check payload length limit for all frames, Alexander Bulekov, 2020/07/20