From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:32945) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aOUwd-0003V0-2F for qemu-devel@nongnu.org; Wed, 27 Jan 2016 13:35:55 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1aOUwZ-0003aE-Si for qemu-devel@nongnu.org; Wed, 27 Jan 2016 13:35:54 -0500 Received: from mx1.redhat.com ([209.132.183.28]:39647) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aOUwZ-0003ZL-OF for qemu-devel@nongnu.org; Wed, 27 Jan 2016 13:35:51 -0500 References: <1453209440-16455-1-git-send-email-lersek@redhat.com> <56A19D63.1000204@redhat.com> <56A1C819.7080506@msgid.tls.msk.ru> <56A1C91C.1080808@redhat.com> From: Laszlo Ersek Message-ID: <56A90E02.60304@redhat.com> Date: Wed, 27 Jan 2016 19:35:46 +0100 MIME-Version: 1.0 In-Reply-To: <56A1C91C.1080808@redhat.com> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit Subject: Re: [Qemu-devel] [PATCH] e1000: eliminate infinite loops on out-of-bounds transfer start List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Jason Wang Cc: Petr Matousek , Stefano Stabellini , "Michael S. Tsirkin" , Michael Tokarev , Michael Roth , qemu-devel@nongnu.org, Prasad Pandit Hello Jason, On 01/22/16 07:15, Jason Wang wrote: > > > On 01/22/2016 02:11 PM, Michael Tokarev wrote: >> 22.01.2016 06:09, Jason Wang wrote: >>> On 01/19/2016 09:17 PM, Laszlo Ersek wrote: >>>> The start_xmit() and e1000_receive_iov() functions implement DMA transfers >>>> iterating over a set of descriptors that the guest's e1000 driver >>>> prepares: >> ... >>> Applied in my -net. >> This is CVE-2016-1981, btw. >> >> /mjt >> > > Add this into commit log. do you plan to send a PULL req soon? The patch is not really urgent, but it would help me move forward with my queue. Thanks! Laszlo