[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Qemu-devel] [PATCH v2] usb: fix up post load checks
From: |
Juan Quintela |
Subject: |
Re: [Qemu-devel] [PATCH v2] usb: fix up post load checks |
Date: |
Wed, 14 May 2014 15:20:30 +0200 |
User-agent: |
Gnus/5.13 (Gnus v5.13) Emacs/24.3 (gnu/linux) |
"Michael S. Tsirkin" <address@hidden> wrote:
> Correct post load checks:
> 1. dev->setup_len == sizeof(dev->data_buf)
> seems fine, no need to fail migration
> 2. When state is DATA, passing index > len
> will cause memcpy with negative length,
> resulting in heap overflow
>
> First of the issues was reported by dgilbert.
>
> Reported-by: "Dr. David Alan Gilbert" <address@hidden>
> Signed-off-by: Michael S. Tsirkin <address@hidden>
Thanks, applied.