qemu-irix/hw/net
Prasad J Pandit 3b9717a62b net: check fragment length during fragmentation
Network transport abstraction layer supports packet fragmentation.
While fragmenting a packet, it checks for more fragments from
packet length and current fragment length. It is susceptible
to an infinite loop, if the current fragment length is zero.
Add check to avoid it.

Reported-by: Li Qiang <liqiang6-s@360.cn>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Reviewed-by: Dmitry Fleytman <dmitry@daynix.com>
CC: qemu-stable@nongnu.org
Signed-off-by: Jason Wang <jasowang@redhat.com>
(cherry picked from commit ead315e43e)
Signed-off-by: Michael Roth <mdroth@linux.vnet.ibm.com>
2016-09-08 14:42:28 -05:00
..
fsl_etsec all: Clean up includes 2016-02-23 12:43:05 +00:00
rocker rocker: allow user to specify rocker world by property 2016-03-08 15:34:18 +08:00
Makefile.objs
allwinner_emac.c
cadence_gem.c
dp8393x.c Replaced get_tick_per_sec() by NANOSECONDS_PER_SECOND 2016-03-22 22:20:17 +01:00
e1000.c Revert "e1000: fix hang of win2k12 shutdown with flood ping" 2016-03-30 08:57:42 +08:00
e1000_regs.h
eepro100.c
etraxfs_eth.c
imx_fec.c i.MX: Add missing descriptions in devices. 2016-03-16 17:42:18 +00:00
lan9118.c
lance.c
mcf_fec.c
milkymist-minimac2.c hw: explicitly include qemu-common.h and cpu.h 2016-03-22 22:20:17 +01:00
mipsnet.c net: mipsnet: check packet length against buffer 2016-08-09 14:28:45 -05:00
ne2000-isa.c include/qemu/osdep.h: Don't include qapi/error.h 2016-03-22 22:20:15 +01:00
ne2000.c net: ne2000: check ring buffer control registers 2016-03-08 15:34:09 +08:00
ne2000.h
opencores_eth.c opencores_eth: indicate autonegotiation completion 2016-04-04 07:08:26 +03:00
pcnet-pci.c
pcnet.c
pcnet.h
rtl8139.c rtl8139: using CP_TX_OWN for ownership transferring during tx 2016-04-06 09:52:07 +08:00
smc91c111.c
spapr_llan.c * Log filtering from Alex and Peter 2016-03-24 21:42:40 +00:00
stellaris_enet.c net: stellaris_enet: check packet length against receive buffer 2016-04-11 14:22:33 +01:00
vhost_net.c vhost-user interrupt management fixes 2016-02-18 16:13:56 +02:00
virtio-net.c Revert "virtio-net: unbreak self announcement and guest offloads after migration" 2016-08-05 15:23:40 -05:00
vmware_utils.h
vmxnet3.c Fix some typos found by codespell 2016-08-05 16:14:47 -05:00
vmxnet3.h
vmxnet_debug.h
vmxnet_rx_pkt.c
vmxnet_rx_pkt.h Clean up includes some more 2016-03-22 22:20:16 +01:00
vmxnet_tx_pkt.c net: check fragment length during fragmentation 2016-09-08 14:42:28 -05:00
vmxnet_tx_pkt.h Clean up includes some more 2016-03-22 22:20:16 +01:00
xen_nic.c
xgmac.c
xilinx_axienet.c include/qemu/osdep.h: Don't include qapi/error.h 2016-03-22 22:20:15 +01:00
xilinx_ethlite.c hw: explicitly include qemu-common.h and cpu.h 2016-03-22 22:20:17 +01:00