From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:39505) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aOkSb-0006sJ-1t for qemu-devel@nongnu.org; Thu, 28 Jan 2016 06:09:57 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1aOkSY-0000iu-Cz for qemu-devel@nongnu.org; Thu, 28 Jan 2016 06:09:57 -0500 Received: from mx1.redhat.com ([209.132.183.28]:36151) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aOkSY-0000iR-7p for qemu-devel@nongnu.org; Thu, 28 Jan 2016 06:09:54 -0500 References: <1453209440-16455-1-git-send-email-lersek@redhat.com> <56A19D63.1000204@redhat.com> <56A1C819.7080506@msgid.tls.msk.ru> <56A1C91C.1080808@redhat.com> <56A90E02.60304@redhat.com> <56A9AB57.6050305@redhat.com> From: Laszlo Ersek Message-ID: <56A9F6FF.4060401@redhat.com> Date: Thu, 28 Jan 2016 12:09:51 +0100 MIME-Version: 1.0 In-Reply-To: <56A9AB57.6050305@redhat.com> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit Subject: Re: [Qemu-devel] [PATCH] e1000: eliminate infinite loops on out-of-bounds transfer start List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Jason Wang Cc: Petr Matousek , "Michael S. Tsirkin" , Stefano Stabellini , Michael Tokarev , qemu-devel@nongnu.org, Michael Roth , Prasad Pandit On 01/28/16 06:47, Jason Wang wrote: > > > On 01/28/2016 02:35 AM, Laszlo Ersek wrote: >> Hello Jason, >> >> On 01/22/16 07:15, Jason Wang wrote: >>> >>> On 01/22/2016 02:11 PM, Michael Tokarev wrote: >>>> 22.01.2016 06:09, Jason Wang wrote: >>>>> On 01/19/2016 09:17 PM, Laszlo Ersek wrote: >>>>>> The start_xmit() and e1000_receive_iov() functions implement DMA transfers >>>>>> iterating over a set of descriptors that the guest's e1000 driver >>>>>> prepares: >>>> ... >>>>> Applied in my -net. >>>> This is CVE-2016-1981, btw. >>>> >>>> /mjt >>>> >>> Add this into commit log. >> do you plan to send a PULL req soon? The patch is not really urgent, but >> it would help me move forward with my queue. >> >> Thanks! >> Laszlo >> > > Plan to send it next Tuesday. But if you wish, I can send it tomorrow. Next Tuesday is perfectly fine, thank you! Laszlo