From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:58521) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1V6tSs-0005op-0z for qemu-devel@nongnu.org; Tue, 06 Aug 2013 22:27:14 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1V6tSk-0006OF-OK for qemu-devel@nongnu.org; Tue, 06 Aug 2013 22:27:05 -0400 Received: from mail.valinux.co.jp ([210.128.90.3]:52984) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1V6tSk-0006Nu-En for qemu-devel@nongnu.org; Tue, 06 Aug 2013 22:26:58 -0400 From: Isaku Yamahata Date: Wed, 7 Aug 2013 11:26:52 +0900 Message-Id: Subject: [Qemu-devel] [PATCH 0/3] rdma: validate remote provided RDMAControlHeader::len List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: qemu-devel@nongnu.org Cc: owasserm@redhat.com, pbonzini@redhat.com, mrhines@us.ibm.com, quintela@redhat.com RDMAControlHeader::len is remote-provided. So validate the value before use. Isaku Yamahata (3): rdma: use resp.len after validation in qemu_rdma_registration_stop rdma: validate RDMAControlHeader::len rdma: check if RDMAControlHeader::len match transferred byte migration-rdma.c | 44 ++++++++++++++++++++++++++++++-------------- 1 file changed, 30 insertions(+), 14 deletions(-) -- 1.7.10.4