Re: [Qemu-devel] [PATCH 0/4] migration: fix CVE-2014-7840

[Amos Kong <akong@redhat.com>]

[-- Attachment #1: Type: text/plain, Size: 937 bytes --]

On Wed, Nov 12, 2014 at 11:44:35AM +0200, Michael S. Tsirkin wrote:
> This patchset fixes CVE-2014-7840: invalid
> migration stream can cause arbitrary qemu memory
> overwrite.
> First patch includes the minimal fix for the issue.
> Follow-up patches on top add extra checking to reduce the
> chance this kind of bug recurs.
> 
> Note: these are already (tentatively-pending review)
> queued in my tree, so only review/ack
> is necessary.
> 
> Michael S. Tsirkin (4):

Reviewed-by: Amos Kong <akong@redhat.com>

>   migration: fix parameter validation on ram load
>   exec: add wrapper for host pointer access
>   cpu: assert host pointer offset within block
>   cpu: verify that block->host is set
> 
>  include/exec/cpu-all.h |  7 +++++++
>  arch_init.c            |  5 +++--
>  exec.c                 | 10 +++++-----
>  3 files changed, 15 insertions(+), 7 deletions(-)
> 
> -- 
> MST
> 

-- 
			Amos.

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 819 bytes --]