[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Qemu-devel] [PATCH] Out off array access in usb-net
From: |
Gleb Natapov |
Subject: |
Re: [Qemu-devel] [PATCH] Out off array access in usb-net |
Date: |
Tue, 9 Nov 2010 12:34:22 +0200 |
On Tue, Nov 09, 2010 at 11:16:43AM +0100, Markus Armbruster wrote:
> Gleb Natapov <address@hidden> writes:
>
> > On Tue, Nov 09, 2010 at 10:30:54AM +0100, Markus Armbruster wrote:
> >> Gleb Natapov <address@hidden> writes:
> >>
> >> > Properly check array bounds before accessing array element.
> >>
> >> Impact?
> >>
> > Gapping security hole for those unfortunate enough to use usb-net?
>
> Doesn't that bit of information belong in the commit message.
>
Some people prefer not to put such information into commit message.
> >> Apply to stable as well?
> >>
> > Definitely. Actually for me Windows7 crashed when usb-net is present.
>
> And that as well.
>
> Good catch!
--
Gleb.
Re: [Qemu-devel] [PATCH] Out off array access in usb-net, Anthony Liguori, 2010/11/16