On 2020/7/21 下午1:59, Li Qiang wrote:
Jason Wang 于2020年7月21日周二 下午1:30写道：
On 2020/7/21 下午12:33, Li Qiang wrote:
Jason Wang 于2020年7月21日周二 上午10:03写道：
On 2020/7/21 上午12:45, Li Qiang wrote:
Alexander Bulekov reported a UAF bug related e1000e packets send.
-->https://bugs.launchpad.net/qemu/+b
Jason Wang 于2020年7月21日周二 下午1:30写道：
>
>
> On 2020/7/21 下午12:33, Li Qiang wrote:
> > Jason Wang 于2020年7月21日周二 上午10:03写道：
> >>
> >> On 2020/7/21 上午12:45, Li Qiang wrote:
> >>> Alexander Bulekov reported a UAF bug related e1000e packets send.
> >>>
> >>> -->https://bugs.launchpad.net/qemu/+bug/188636
On 2020/7/21 下午12:33, Li Qiang wrote:
Jason Wang 于2020年7月21日周二 上午10:03写道：
On 2020/7/21 上午12:45, Li Qiang wrote:
Alexander Bulekov reported a UAF bug related e1000e packets send.
-->https://bugs.launchpad.net/qemu/+bug/1886362
This is because the guest trigger a e1000e packet send and set
Jason Wang 于2020年7月21日周二 上午10:03写道：
>
>
> On 2020/7/21 上午12:45, Li Qiang wrote:
> > Alexander Bulekov reported a UAF bug related e1000e packets send.
> >
> > -->https://bugs.launchpad.net/qemu/+bug/1886362
> >
> > This is because the guest trigger a e1000e packet send and set the
> > data's addres
On 2020/7/21 上午12:45, Li Qiang wrote:
Alexander Bulekov reported a UAF bug related e1000e packets send.
-->https://bugs.launchpad.net/qemu/+bug/1886362
This is because the guest trigger a e1000e packet send and set the
data's address to e1000e's MMIO address. So when the e1000e do DMA
it will
Alexander Bulekov reported a UAF bug related e1000e packets send.
-->https://bugs.launchpad.net/qemu/+bug/1886362
This is because the guest trigger a e1000e packet send and set the
data's address to e1000e's MMIO address. So when the e1000e do DMA
it will write the MMIO again and trigger re-entra
