|
| From: | Michael Tokarev |
| Subject: | Re: [Qemu-devel] [PATCH] e1000: eliminate infinite loops on out-of-bounds transfer start |
| Date: | Fri, 22 Jan 2016 09:11:37 +0300 |
| User-agent: | Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Icedove/38.5.0 |
22.01.2016 06:09, Jason Wang wrote: > On 01/19/2016 09:17 PM, Laszlo Ersek wrote: >> The start_xmit() and e1000_receive_iov() functions implement DMA transfers >> iterating over a set of descriptors that the guest's e1000 driver >> prepares: ... > Applied in my -net. This is CVE-2016-1981, btw. /mjt
| [Prev in Thread] | Current Thread | [Next in Thread] |