[libvirt] [PATCHv2-resend] uml: sanity check external data before using it

Eric Blake eblake at redhat.com
Fri Jun 11 16:34:37 UTC 2010


On 06/10/2010 02:06 PM, Matthias Bolte wrote:
> 2010/6/10 Eric Blake <eblake at redhat.com>:
>> Otherwise, a malicious packet could cause a DoS via spurious
>> out-of-memory failure.
>>
>> * src/uml/uml_driver.c (umlMonitorCommand): Validate that incoming
>> data is reliable before using it to allocate/dereference memory.
>> Don't report bogus errno on short read.
>> Reported by Jim Meyering.
>> ---
>>
> 
> ACK.

Thanks; pushed now.

-- 
Eric Blake   eblake at redhat.com    +1-801-349-2682
Libvirt virtualization library http://libvirt.org

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 619 bytes
Desc: OpenPGP digital signature
URL: <http://listman.redhat.com/archives/libvir-list/attachments/20100611/cff3b8a5/attachment-0001.sig>


More information about the libvir-list mailing list