Re: [Qemu-devel] [PATCH 0/4] migration: fix CVE-2014-7840

2014-12-09 Thread Amit Shah
On (Wed) 12 Nov 2014 [11:44:35], Michael S. Tsirkin wrote: > This patchset fixes CVE-2014-7840: invalid > migration stream can cause arbitrary qemu memory > overwrite. > First patch includes the minimal fix for the issue. > Follow-up patches on top add extra checking to reduce the > chance this kin

Re: [Qemu-devel] [PATCH 0/4] migration: fix CVE-2014-7840

2014-12-08 Thread Amos Kong
On Wed, Nov 12, 2014 at 11:44:35AM +0200, Michael S. Tsirkin wrote: > This patchset fixes CVE-2014-7840: invalid > migration stream can cause arbitrary qemu memory > overwrite. > First patch includes the minimal fix for the issue. > Follow-up patches on top add extra checking to reduce the > chance

Re: [Qemu-devel] [PATCH 0/4] migration: fix CVE-2014-7840

2014-11-18 Thread Dr. David Alan Gilbert
* Michael S. Tsirkin (m...@redhat.com) wrote: > On Tue, Nov 18, 2014 at 02:31:34PM +0530, Amit Shah wrote: > > On (Wed) 12 Nov 2014 [11:44:35], Michael S. Tsirkin wrote: > > > This patchset fixes CVE-2014-7840: invalid > > > migration stream can cause arbitrary qemu memory > > > overwrite. > > > Fi

Re: [Qemu-devel] [PATCH 0/4] migration: fix CVE-2014-7840

2014-11-18 Thread Michael S. Tsirkin
On Tue, Nov 18, 2014 at 02:31:34PM +0530, Amit Shah wrote: > On (Wed) 12 Nov 2014 [11:44:35], Michael S. Tsirkin wrote: > > This patchset fixes CVE-2014-7840: invalid > > migration stream can cause arbitrary qemu memory > > overwrite. > > First patch includes the minimal fix for the issue. > > Foll

Re: [Qemu-devel] [PATCH 0/4] migration: fix CVE-2014-7840

2014-11-18 Thread Dr. David Alan Gilbert
* Amit Shah (amit.s...@redhat.com) wrote: > On (Wed) 12 Nov 2014 [11:44:35], Michael S. Tsirkin wrote: > > This patchset fixes CVE-2014-7840: invalid > > migration stream can cause arbitrary qemu memory > > overwrite. > > First patch includes the minimal fix for the issue. > > Follow-up patches on

Re: [Qemu-devel] [PATCH 0/4] migration: fix CVE-2014-7840

2014-11-18 Thread Amit Shah
On (Mon) 17 Nov 2014 [14:36:45], Michael S. Tsirkin wrote: > On Mon, Nov 17, 2014 at 05:50:34PM +0530, Amit Shah wrote: > > On (Mon) 17 Nov 2014 [13:48:58], Michael S. Tsirkin wrote: > > > On Mon, Nov 17, 2014 at 04:37:50PM +0530, Amit Shah wrote: > > > > On (Mon) 17 Nov 2014 [12:52:59], Michael S.

Re: [Qemu-devel] [PATCH 0/4] migration: fix CVE-2014-7840

2014-11-18 Thread Amit Shah
On (Wed) 12 Nov 2014 [11:44:35], Michael S. Tsirkin wrote: > This patchset fixes CVE-2014-7840: invalid > migration stream can cause arbitrary qemu memory > overwrite. > First patch includes the minimal fix for the issue. > Follow-up patches on top add extra checking to reduce the > chance this kin

Re: [Qemu-devel] [PATCH 0/4] migration: fix CVE-2014-7840

2014-11-17 Thread Michael S. Tsirkin
On Mon, Nov 17, 2014 at 05:50:34PM +0530, Amit Shah wrote: > On (Mon) 17 Nov 2014 [13:48:58], Michael S. Tsirkin wrote: > > On Mon, Nov 17, 2014 at 04:37:50PM +0530, Amit Shah wrote: > > > On (Mon) 17 Nov 2014 [12:52:59], Michael S. Tsirkin wrote: > > > > On Mon, Nov 17, 2014 at 04:08:58PM +0530, A

Re: [Qemu-devel] [PATCH 0/4] migration: fix CVE-2014-7840

2014-11-17 Thread Amit Shah
On (Mon) 17 Nov 2014 [13:48:58], Michael S. Tsirkin wrote: > On Mon, Nov 17, 2014 at 04:37:50PM +0530, Amit Shah wrote: > > On (Mon) 17 Nov 2014 [12:52:59], Michael S. Tsirkin wrote: > > > On Mon, Nov 17, 2014 at 04:08:58PM +0530, Amit Shah wrote: > > > > On (Mon) 17 Nov 2014 [12:32:57], Michael S.

Re: [Qemu-devel] [PATCH 0/4] migration: fix CVE-2014-7840

2014-11-17 Thread Michael S. Tsirkin
On Mon, Nov 17, 2014 at 04:37:50PM +0530, Amit Shah wrote: > On (Mon) 17 Nov 2014 [12:52:59], Michael S. Tsirkin wrote: > > On Mon, Nov 17, 2014 at 04:08:58PM +0530, Amit Shah wrote: > > > On (Mon) 17 Nov 2014 [12:32:57], Michael S. Tsirkin wrote: > > > > On Mon, Nov 17, 2014 at 12:06:38PM +0530, A

Re: [Qemu-devel] [PATCH 0/4] migration: fix CVE-2014-7840

2014-11-17 Thread Amit Shah
On (Mon) 17 Nov 2014 [12:52:59], Michael S. Tsirkin wrote: > On Mon, Nov 17, 2014 at 04:08:58PM +0530, Amit Shah wrote: > > On (Mon) 17 Nov 2014 [12:32:57], Michael S. Tsirkin wrote: > > > On Mon, Nov 17, 2014 at 12:06:38PM +0530, Amit Shah wrote: > > > > On (Wed) 12 Nov 2014 [11:44:35], Michael S.

Re: [Qemu-devel] [PATCH 0/4] migration: fix CVE-2014-7840

2014-11-17 Thread Michael S. Tsirkin
On Mon, Nov 17, 2014 at 04:08:58PM +0530, Amit Shah wrote: > On (Mon) 17 Nov 2014 [12:32:57], Michael S. Tsirkin wrote: > > On Mon, Nov 17, 2014 at 12:06:38PM +0530, Amit Shah wrote: > > > On (Wed) 12 Nov 2014 [11:44:35], Michael S. Tsirkin wrote: > > > > This patchset fixes CVE-2014-7840: invalid

Re: [Qemu-devel] [PATCH 0/4] migration: fix CVE-2014-7840

2014-11-17 Thread Amit Shah
On (Mon) 17 Nov 2014 [12:32:57], Michael S. Tsirkin wrote: > On Mon, Nov 17, 2014 at 12:06:38PM +0530, Amit Shah wrote: > > On (Wed) 12 Nov 2014 [11:44:35], Michael S. Tsirkin wrote: > > > This patchset fixes CVE-2014-7840: invalid > > > migration stream can cause arbitrary qemu memory > > > overwr

Re: [Qemu-devel] [PATCH 0/4] migration: fix CVE-2014-7840

2014-11-17 Thread Michael S. Tsirkin
On Mon, Nov 17, 2014 at 12:06:38PM +0530, Amit Shah wrote: > On (Wed) 12 Nov 2014 [11:44:35], Michael S. Tsirkin wrote: > > This patchset fixes CVE-2014-7840: invalid > > migration stream can cause arbitrary qemu memory > > overwrite. > > First patch includes the minimal fix for the issue. > > Foll

Re: [Qemu-devel] [PATCH 0/4] migration: fix CVE-2014-7840

2014-11-16 Thread Amit Shah
On (Wed) 12 Nov 2014 [11:44:35], Michael S. Tsirkin wrote: > This patchset fixes CVE-2014-7840: invalid > migration stream can cause arbitrary qemu memory > overwrite. > First patch includes the minimal fix for the issue. > Follow-up patches on top add extra checking to reduce the > chance this kin

[Qemu-devel] [PATCH 0/4] migration: fix CVE-2014-7840

2014-11-12 Thread Michael S. Tsirkin
This patchset fixes CVE-2014-7840: invalid migration stream can cause arbitrary qemu memory overwrite. First patch includes the minimal fix for the issue. Follow-up patches on top add extra checking to reduce the chance this kind of bug recurs. Note: these are already (tentatively-pending review)