| commit | 6c352ca9b4ee3e1e286ea9e8434bd8e69ac7d0d8 | |
| author | Li Qiang <liqiang6-s@360.cn> | |
| Mon, 8 Aug 2016 12:38:31 +0000 (8 18:08 +0530) | ||
| committer | Jason Wang <jasowang@redhat.com> | |
| Tue, 9 Aug 2016 07:24:56 +0000 (9 15:24 +0800) | ||
| tree | 8913f14f53cb99b460745044a1ee05f2c72639af | treesnapshot (tar.gz zip) |
| parent | ead315e43ea0c2ca3491209c6c8db8ce3f2bbe05 | commitdiff |
net: vmxnet3: check for device_active before write
Vmxnet3 device emulator does not check if the device is active,
before using it for write. It leads to a use after free issue,
if the vmxnet3_io_bar0_write routine is called after the device is
deactivated. Add check to avoid it.
Reported-by: Li Qiang <liqiang6-s@360.cn>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Acked-by: Dmitry Fleytman <dmitry@daynix.com>
Signed-off-by: Jason Wang <jasowang@redhat.com>
Vmxnet3 device emulator does not check if the device is active,
before using it for write. It leads to a use after free issue,
if the vmxnet3_io_bar0_write routine is called after the device is
deactivated. Add check to avoid it.
Reported-by: Li Qiang <liqiang6-s@360.cn>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Acked-by: Dmitry Fleytman <dmitry@daynix.com>
Signed-off-by: Jason Wang <jasowang@redhat.com>
| hw/net/vmxnet3.c | diffblobblamehistory |