diff options
| author | Stefan Hajnoczi <stefanha@redhat.com> | 2016-08-04 14:52:53 +0100 |
|---|---|---|
| committer | Michael S. Tsirkin <mst@redhat.com> | 2016-08-09 13:42:37 +0300 |
| commit | 3fda5d6e580193fa005014355b3a61498f1b3ae0 (patch) | |
| tree | 351ecd0bebf5e2e863ad233fe356cf54a08d9ce3 /scripts | |
| parent | 1b8553c04bf95180eb91be94f089a1e8b38cfd62 (diff) | |
| download | linux-3fda5d6e580193fa005014355b3a61498f1b3ae0.tar.bz2 | |
vhost/vsock: fix vhost virtio_vsock_pkt use-after-free
Stash the packet length in a local variable before handing over
ownership of the packet to virtio_transport_recv_pkt() or
virtio_transport_free_pkt().
This patch solves the use-after-free since pkt is no longer guaranteed
to be alive.
Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Diffstat (limited to 'scripts')
0 files changed, 0 insertions, 0 deletions