From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mga02.intel.com (mga02.intel.com [134.134.136.20]) by dpdk.org (Postfix) with ESMTP id 5B1C31AEF0 for ; Wed, 20 Sep 2017 11:38:20 +0200 (CEST) Received: from orsmga003.jf.intel.com ([10.7.209.27]) by orsmga101.jf.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 20 Sep 2017 02:38:19 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.42,420,1500966000"; d="scan'208";a="1016529626" Received: from fmsmsx108.amr.corp.intel.com ([10.18.124.206]) by orsmga003.jf.intel.com with ESMTP; 20 Sep 2017 02:38:19 -0700 Received: from fmsmsx158.amr.corp.intel.com (10.18.116.75) by FMSMSX108.amr.corp.intel.com (10.18.124.206) with Microsoft SMTP Server (TLS) id 14.3.319.2; Wed, 20 Sep 2017 02:38:18 -0700 Received: from shsmsx152.ccr.corp.intel.com (10.239.6.52) by fmsmsx158.amr.corp.intel.com (10.18.116.75) with Microsoft SMTP Server (TLS) id 14.3.319.2; Wed, 20 Sep 2017 02:38:18 -0700 Received: from shsmsx103.ccr.corp.intel.com ([169.254.4.213]) by SHSMSX152.ccr.corp.intel.com ([169.254.6.93]) with mapi id 14.03.0319.002; Wed, 20 Sep 2017 17:38:16 +0800 From: "Tan, Jianfeng" To: "Mrzyglod, DanielX T" , "yliu@fridaylinux.org" CC: "dev@dpdk.org" Thread-Topic: [PATCH] net/virtio: fix of untrusted scalar value Thread-Index: AQHTMfI7XNhZwIgK0USV2CFn+8MSI6K9hCyQ Date: Wed, 20 Sep 2017 09:38:15 +0000 Message-ID: References: <20170920091917.3929-1-danielx.t.mrzyglod@intel.com> In-Reply-To: <20170920091917.3929-1-danielx.t.mrzyglod@intel.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.239.127.40] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [dpdk-dev] [PATCH] net/virtio: fix of untrusted scalar value X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Sep 2017 09:38:20 -0000 Hi, > -----Original Message----- > From: Mrzyglod, DanielX T > Sent: Wednesday, September 20, 2017 5:19 PM > To: yliu@fridaylinux.org > Cc: dev@dpdk.org; Mrzyglod, DanielX T; Tan, Jianfeng > Subject: [PATCH] net/virtio: fix of untrusted scalar value >=20 > The unscrutinized value may be incorrectly assumed to be within a certain > range by later operations. >=20 > In vhost_user_read: An unscrutinized value from an untrusted source used > in a trusted context - the value of sz_payload may be harmfull and we nee= d > limit them to the max value of payload. Please add below line. Coverity issue: 139601 >=20 > Fixes: 6a84c37e3975 ("net/virtio-user: add vhost-user adapter layer") > Cc: jianfeng.tan@intel.com >=20 > Signed-off-by: Daniel Mrzyglod Acked-by: Jianfeng Tan Thanks, Jianfeng