[Qemu-devel] [PULL 0/3] Net patches

[Stefan Hajnoczi]

The following changes since commit 2752e5bedb26fa0c7291f810f9f534b688b2f1d2:

  qapi: Fix cgen() for Python older than 2.7 (2015-09-14 18:02:59 +0100)

are available in the git repository at:

  git://github.com/stefanha/qemu.git tags/net-pull-request

for you to fetch changes up to 737d2b3c41d59eb8f94ab7eb419b957938f24943:

  net: avoid infinite loop when receiving packets(CVE-2015-5278) (2015-09-15 
12:51:14 +0100)

----------------------------------------------------------------
This net pull request contains security fixes for qemu.git/master.  The patches
should also be applied to stable trees.

The ne2000 NIC model has QEMU memory corruption issue.  Both ne2000 and e1000
have an infinite loop.

Please see the patches for CVE numbers and details on the bugs.

----------------------------------------------------------------

P J P (3):
  e1000: Avoid infinite loop in processing transmit descriptor
    (CVE-2015-6815)
  net: add checks to validate ring buffer pointers(CVE-2015-5279)
  net: avoid infinite loop when receiving packets(CVE-2015-5278)

 hw/net/e1000.c  |  3 ++-
 hw/net/ne2000.c | 21 ++++++++++++++++-----
 2 files changed, 18 insertions(+), 6 deletions(-)

-- 
2.4.3