Stefan Hajnoczi 4240be4563 rtl8139: skip offload on short TCP header (CVE-2015-5165)
TCP Large Segment Offload accesses the TCP header in the packet.  If the
packet is too short we must not attempt to access header fields:

  tcp_header *p_tcp_hdr = (tcp_header*)(eth_payload_data + hlen);
  int tcp_hlen = TCP_HEADER_DATA_OFFSET(p_tcp_hdr);

Reported-by: 朱东海(启路) <donghai.zdh@alibaba-inc.com>
Reviewed-by: Jason Wang <jasowang@redhat.com>
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
2015-08-03 13:08:07 +01:00
2015-07-08 13:11:01 +02:00
2015-07-28 13:22:57 +01:00
2015-07-07 14:54:55 +02:00
2015-07-09 15:20:40 +02:00
2015-07-28 14:19:16 +01:00
2015-07-24 13:57:44 +02:00
2015-06-12 06:42:34 +02:00
2015-07-14 21:50:13 -04:00
2015-07-27 22:44:47 +03:00
2015-04-30 16:05:48 +03:00
2015-06-12 13:42:17 +01:00
2015-07-07 09:22:40 +01:00
2015-07-14 17:15:23 +02:00
2015-07-27 22:44:47 +03:00
2015-07-27 22:44:47 +03:00
2015-07-24 13:57:45 +02:00
2015-07-24 13:57:45 +02:00
2015-07-24 13:57:45 +02:00
2015-05-11 08:59:07 -04:00
2015-05-22 15:58:22 -04:00
2015-06-11 10:13:28 +01:00
2015-07-29 18:50:11 +01:00
2015-06-23 17:46:20 +01:00

Read the documentation in qemu-doc.html or on http://wiki.qemu-project.org

- QEMU team
Description
QEMU With E2K User Support
Readme 459 MiB
Languages
C 83.1%
C++ 6.3%
Python 3.2%
Dylan 2.8%
Shell 1.6%
Other 2.8%