diff options
| author | Jason Wang <jasowang@redhat.com> | 2021-02-24 13:00:01 +0800 |
|---|---|---|
| committer | Jason Wang <jasowang@redhat.com> | 2021-03-15 16:41:22 +0800 |
| commit | 26194a58f4eb83c5bdf4061a1628508084450ba1 (patch) | |
| tree | 002ff34f25c1586823e4e4e950c8c4993b0f9fa2 /hw | |
| parent | 331d2ac9ea307c990dc86e6493e8f0c48d14bb33 (diff) | |
| download | qemu-26194a58f4eb83c5bdf4061a1628508084450ba1.zip qemu-26194a58f4eb83c5bdf4061a1628508084450ba1.tar.gz qemu-26194a58f4eb83c5bdf4061a1628508084450ba1.tar.bz2 | |
msf2-mac: switch to use qemu_receive_packet() for loopback
This patch switches to use qemu_receive_packet() which can detect
reentrancy and return early.
This is intended to address CVE-2021-3416.
Cc: Prasad J Pandit <ppandit@redhat.com>
Cc: qemu-stable@nongnu.org
Reviewed-by: Philippe Mathieu-Daudé <philmd@redhat.com>
Signed-off-by: Jason Wang <jasowang@redhat.com>
Diffstat (limited to 'hw')
| -rw-r--r-- | hw/net/msf2-emac.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/hw/net/msf2-emac.c b/hw/net/msf2-emac.c index 32ba9e8..3e62060 100644 --- a/hw/net/msf2-emac.c +++ b/hw/net/msf2-emac.c @@ -158,7 +158,7 @@ static void msf2_dma_tx(MSF2EmacState *s) * R_CFG1 bit 0 is set. */ if (s->regs[R_CFG1] & R_CFG1_LB_EN_MASK) { - nc->info->receive(nc, buf, size); + qemu_receive_packet(nc, buf, size); } else { qemu_send_packet(nc, buf, size); } |