Re: [Qemu-devel] [PATCH v2 0/4] json-streamer: Fix up code to limit nesting and size

2015-11-19 Thread Markus Armbruster
Eric Blake writes: > On 11/19/2015 08:29 AM, Markus Armbruster wrote: >> Ugh, I almost dropped this on the floor. I think it should go into >> 2.5, and I plan to take it through my tree. If you disagree, please >> speak up. > > It sounds like a bug fix to me (avoiding core dumps due to > user-t

Re: [Qemu-devel] [PATCH v2 0/4] json-streamer: Fix up code to limit nesting and size

2015-11-19 Thread Eric Blake
On 11/19/2015 08:29 AM, Markus Armbruster wrote: > Ugh, I almost dropped this on the floor. I think it should go into > 2.5, and I plan to take it through my tree. If you disagree, please > speak up. It sounds like a bug fix to me (avoiding core dumps due to user-triggerable input) and on that g

[Qemu-devel] [PATCH v2 0/4] json-streamer: Fix up code to limit nesting and size

2015-11-19 Thread Markus Armbruster
Ugh, I almost dropped this on the floor. I think it should go into 2.5, and I plan to take it through my tree. If you disagree, please speak up. We limit nesting depth and input size to defend against input triggering excessive heap or stack memory use (commit 29c75dd json-streamer: limit the ma