From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from list by lists.gnu.org with archive (Exim 4.71) id 1ZrhfT-0006L3-SM for mharc-qemu-trivial@gnu.org; Thu, 29 Oct 2015 03:30:39 -0400 Received: from eggs.gnu.org ([2001:4830:134:3::10]:34335) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZrhfQ-0006JF-HT for qemu-trivial@nongnu.org; Thu, 29 Oct 2015 03:30:38 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ZrhfL-0002Iv-0u for qemu-trivial@nongnu.org; Thu, 29 Oct 2015 03:30:36 -0400 Received: from isrv.corpit.ru ([86.62.121.231]:52475) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZrhfE-0002I8-WF; Thu, 29 Oct 2015 03:30:25 -0400 Received: from [192.168.88.2] (mjt.vpn.tls.msk.ru [192.168.177.99]) by isrv.corpit.ru (Postfix) with ESMTP id 6F54E42107; Thu, 29 Oct 2015 10:30:24 +0300 (MSK) Message-ID: <5631CB10.30100@msgid.tls.msk.ru> Date: Thu, 29 Oct 2015 10:30:24 +0300 From: Michael Tokarev Organization: Telecom Service, JSC User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Icedove/31.8.0 MIME-Version: 1.0 To: Kevin Wolf , qemu-devel@nongnu.org References: <1444721930-5121-1-git-send-email-kwolf@redhat.com> In-Reply-To: <1444721930-5121-1-git-send-email-kwolf@redhat.com> OpenPGP: id=804465C5 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 86.62.121.231 Cc: qemu-trivial@nongnu.org, qemu-stable@nongnu.org Subject: Re: [Qemu-trivial] [PATCH] gdbstub: Fix buffer overflows in gdb_handle_packet() X-BeenThere: qemu-trivial@nongnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Oct 2015 07:30:38 -0000 13.10.2015 10:38, Kevin Wolf wrote: > Some places in gdb_handle_packet() can get an arbitrary length (most > times directly from the client) and either didn't check it at all or > checked against the wrong value, potentially causing buffer overflows. Applied to -trivial, thank you! /mjt From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:34309) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZrhfI-0006AM-H6 for qemu-devel@nongnu.org; Thu, 29 Oct 2015 03:30:29 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ZrhfF-0002ID-BM for qemu-devel@nongnu.org; Thu, 29 Oct 2015 03:30:28 -0400 Message-ID: <5631CB10.30100@msgid.tls.msk.ru> Date: Thu, 29 Oct 2015 10:30:24 +0300 From: Michael Tokarev MIME-Version: 1.0 References: <1444721930-5121-1-git-send-email-kwolf@redhat.com> In-Reply-To: <1444721930-5121-1-git-send-email-kwolf@redhat.com> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit Subject: Re: [Qemu-devel] [PATCH] gdbstub: Fix buffer overflows in gdb_handle_packet() List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Kevin Wolf , qemu-devel@nongnu.org Cc: qemu-trivial@nongnu.org, qemu-stable@nongnu.org 13.10.2015 10:38, Kevin Wolf wrote: > Some places in gdb_handle_packet() can get an arbitrary length (most > times directly from the client) and either didn't check it at all or > checked against the wrong value, potentially causing buffer overflows. Applied to -trivial, thank you! /mjt