diff options
| author | Jason Wang <jasowang@redhat.com> | 2021-02-24 12:13:22 +0800 |
|---|---|---|
| committer | Jason Wang <jasowang@redhat.com> | 2021-03-15 16:41:22 +0800 |
| commit | 1caff0340f49c93d535c6558a5138d20d475315c (patch) | |
| tree | c7bfab49856f2cb976c35e7f8faffd796bcdec1b /hw/net/e1000.c | |
| parent | 705df5466c98f3efdd2b68d3b31dad86858acad7 (diff) | |
| download | qemu-1caff0340f49c93d535c6558a5138d20d475315c.zip qemu-1caff0340f49c93d535c6558a5138d20d475315c.tar.gz qemu-1caff0340f49c93d535c6558a5138d20d475315c.tar.bz2 | |
e1000: switch to use qemu_receive_packet() for loopback
This patch switches to use qemu_receive_packet() which can detect
reentrancy and return early.
This is intended to address CVE-2021-3416.
Cc: Prasad J Pandit <ppandit@redhat.com>
Cc: qemu-stable@nongnu.org
Reviewed-by: Philippe Mathieu-Daudé <philmd@redhat.com>
Signed-off-by: Jason Wang <jasowang@redhat.com>
Diffstat (limited to 'hw/net/e1000.c')
| -rw-r--r-- | hw/net/e1000.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/hw/net/e1000.c b/hw/net/e1000.c index 4345d86..4f75b44 100644 --- a/hw/net/e1000.c +++ b/hw/net/e1000.c @@ -546,7 +546,7 @@ e1000_send_packet(E1000State *s, const uint8_t *buf, int size) NetClientState *nc = qemu_get_queue(s->nic); if (s->phy_reg[PHY_CTRL] & MII_CR_LOOPBACK) { - nc->info->receive(nc, buf, size); + qemu_receive_packet(nc, buf, size); } else { qemu_send_packet(nc, buf, size); } |