summary refs log tree commit diff stats
path: root/scripts/qapi-commands.py
diff options
context:
space:
mode:
authorStefan Hajnoczi <stefanha@redhat.com>2015-07-15 17:13:32 +0100
committerStefan Hajnoczi <stefanha@redhat.com>2015-08-03 13:06:59 +0100
commit39b8e7dcaf04cbdb926b478f825b160d852752b5 (patch)
tree61ad89a8348d673fb3dfdd1df0652ef728cbbcfd /scripts/qapi-commands.py
parentcb48f67ad8c7b33c617d4f8144a27706e69fd688 (diff)
downloadfocaccia-qemu-39b8e7dcaf04cbdb926b478f825b160d852752b5.tar.gz
focaccia-qemu-39b8e7dcaf04cbdb926b478f825b160d852752b5.zip
rtl8139: avoid nested ifs in IP header parsing (CVE-2015-5165)
Transmit offload needs to parse packet headers.  If header fields have
unexpected values the offload processing is skipped.

The code currently uses nested ifs because there is relatively little
input validation.  The next patches will add missing input validation
and a goto label is more appropriate to avoid deep if statement nesting.

Reported-by: 朱东海(启路) <donghai.zdh@alibaba-inc.com>
Reviewed-by: Jason Wang <jasowang@redhat.com>
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
Diffstat (limited to 'scripts/qapi-commands.py')
0 files changed, 0 insertions, 0 deletions