Re: [Qemu-devel] [PATCH] Out off array access in usb-net

[Gleb Natapov]

On Tue, Nov 09, 2010 at 11:16:43AM +0100, Markus Armbruster wrote:
> Gleb Natapov <address@hidden> writes:
> 
> > On Tue, Nov 09, 2010 at 10:30:54AM +0100, Markus Armbruster wrote:
> >> Gleb Natapov <address@hidden> writes:
> >> 
> >> > Properly check array bounds before accessing array element.
> >> 
> >> Impact?
> >> 
> > Gapping security hole for those unfortunate enough to use usb-net?
> 
> Doesn't that bit of information belong in the commit message.
> 
Some people prefer not to put such information into commit message.

> >> Apply to stable as well?
> >> 
> > Definitely. Actually for me Windows7 crashed when usb-net is present.
> 
> And that as well.
> 
> Good catch!

--
                        Gleb.