From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:37099) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gMddf-0005AT-7e for qemu-devel@nongnu.org; Tue, 13 Nov 2018 13:42:18 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1gMdPo-0003Ce-3G for qemu-devel@nongnu.org; Tue, 13 Nov 2018 13:27:57 -0500 References: <1541121763-3277-1-git-send-email-liq3ea@gmail.com> <20181113101704.GB4830@localhost.localdomain> From: Paolo Bonzini Message-ID: <2db2eb88-bc7c-d3c0-93ca-43d6a2f79b0a@redhat.com> Date: Tue, 13 Nov 2018 19:27:45 +0100 MIME-Version: 1.0 In-Reply-To: <20181113101704.GB4830@localhost.localdomain> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit Subject: Re: [Qemu-devel] [PATCH] nvme: fix oob access issue(CVE-2018-16847) List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Kevin Wolf , Li Qiang Cc: keith.busch@intel.com, mreitz@redhat.com, P J P , qemu-block@nongnu.org, Qemu Developers On 13/11/2018 11:17, Kevin Wolf wrote: > Am 13.11.2018 um 02:45 hat Li Qiang geschrieben: >> Ping.... what't the status of this patch. >> >> I see Kevin's new pr doesn't contain this patch. > > Oh, I thought you said that you wanted to fix this at a higher level so > that the problem is caught before even getting into nvme code? If you > don't, I can apply the patch for my next pull request. As far as I know the bug doesn't exist. Li Qiang, if you have a reproducer please send it. Prasad, please revoke the CVE. Paolo