From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:56162) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Zzg3I-0004cJ-Qj for qemu-devel@nongnu.org; Fri, 20 Nov 2015 02:24:13 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Zzg3F-00018I-1L for qemu-devel@nongnu.org; Fri, 20 Nov 2015 02:24:12 -0500 Received: from mx1.redhat.com ([209.132.183.28]:51789) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Zzg3E-00016G-SZ for qemu-devel@nongnu.org; Fri, 20 Nov 2015 02:24:08 -0500 Date: Fri, 20 Nov 2015 12:53:55 +0530 (IST) From: P J P In-Reply-To: Message-ID: References: <5620F082.5040007@redhat.com> <5625AEE0.7070908@redhat.com> <56397C1D.6070304@redhat.com> MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Subject: Re: [Qemu-devel] [PATCH] eepro100: prevent an infinite loop over same command block List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Qinghao Tang Cc: Jason Wang , QEMU Developers Hello Qinghao, +-- On Fri, 20 Nov 2015, Qinghao Tang wrote --+ | I think the patch can solve this vulnerability. | I confirm that the loop exist , the poc code can prove that. Great! Thank you so much for the confirmation and the POC code. I'll send an updated patch shortly. Thank you. -- Prasad J Pandit / Red Hat Product Security Team 47AF CE69 3A90 54AA 9045 1053 DD13 3D32 FE5B 041F