| Date | Mon, 6 Oct 2014 16:17:28 +0200 | From | Cornelia Huck <> | Subject | Re: [PATCH 16/16] virtio_net: fix use after free on allocation failure |
| |
On Sun, 5 Oct 2014 19:07:38 +0300 "Michael S. Tsirkin" <mst@redhat.com> wrote:
> In the extremely unlikely event that driver initialization fails after > RX buffers are added, virtio net frees RX buffers while VQs are > still active, potentially causing device to use a freed buffer. > > To fix, reset device first - same as we do on device removal. > > Signed-off-by: Michael S. Tsirkin <mst@redhat.com> > --- > drivers/net/virtio_net.c | 2 ++ > 1 file changed, 2 insertions(+)
Reviewed-by: Cornelia Huck <cornelia.huck@de.ibm.com>
|