Li Qiang cb3677cd50 net: vmxnet: use g_new for pkt initialisation ...

When vmxnet transport abstraction layer initialises pkt,
the maximum fragmentation count is not checked. This could lead
to an integer overflow causing a NULL pointer dereference.
Replace g_malloc() with g_new() to catch the multiplication
overflow.

Reported-by: Li Qiang <liqiang6-s@360.cn>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Acked-by: Dmitry Fleytman <dmitry@daynix.com>
Signed-off-by: Michael Roth <mdroth@linux.vnet.ibm.com>

2016-09-08 15:29:37 -05:00

..

fsl_etsec

all: Clean up includes

2016-02-23 12:43:05 +00:00

rocker

rocker: allow user to specify rocker world by property

2016-03-08 15:34:18 +08:00

allwinner_emac.c

arm: Clean up includes

2016-01-29 15:07:23 +00:00

cadence_gem.c

cadence_gem: fix buffer overflow

2016-02-04 13:22:06 +08:00

dp8393x.c

Replaced get_tick_per_sec() by NANOSECONDS_PER_SECOND

2016-03-22 22:20:17 +01:00

e1000_regs.h

e1000: Trivial implementation of various MAC registers

2015-11-12 15:26:53 +08:00

e1000.c

Revert "e1000: fix hang of win2k12 shutdown with flood ping"

2016-03-30 08:57:42 +08:00

eepro100.c

hw/net: Clean up includes

2016-01-29 15:07:23 +00:00

etraxfs_eth.c

hw/net: Clean up includes

2016-01-29 15:07:23 +00:00

imx_fec.c

i.MX: Add missing descriptions in devices.

2016-03-16 17:42:18 +00:00

lan9118.c

hw/net: Clean up includes

2016-01-29 15:07:23 +00:00

lance.c

hw/net: Clean up includes

2016-01-29 15:07:23 +00:00

Makefile.objs

i.MX: Add FEC Ethernet Emulator

2015-09-07 10:39:30 +01:00

mcf_fec.c

hw/net: Clean up includes

2016-01-29 15:07:23 +00:00

milkymist-minimac2.c

hw: explicitly include qemu-common.h and cpu.h

2016-03-22 22:20:17 +01:00

mipsnet.c

net: mipsnet: check packet length against buffer

2016-08-09 14:28:45 -05:00

ne2000-isa.c

include/qemu/osdep.h: Don't include qapi/error.h

2016-03-22 22:20:15 +01:00

ne2000.c

net: ne2000: check ring buffer control registers

2016-03-08 15:34:09 +08:00

ne2000.h

ne2000: Drop ne2000_can_receive

2015-09-02 14:51:07 +01:00

opencores_eth.c

opencores_eth: indicate autonegotiation completion

2016-04-04 07:08:26 +03:00

pcnet-pci.c

hw/net: Clean up includes

2016-01-29 15:07:23 +00:00

pcnet.c

hw/net: Clean up includes

2016-01-29 15:07:23 +00:00

pcnet.h

pcnet: Drop pcnet_can_receive

2015-07-27 14:12:18 +01:00

rtl8139.c

rtl8139: using CP_TX_OWN for ownership transferring during tx

2016-04-06 09:52:07 +08:00

smc91c111.c

hw/net: Clean up includes

2016-01-29 15:07:23 +00:00

spapr_llan.c

Merge remote-tracking branch 'remotes/bonzini/tags/for-upstream' into staging

2016-03-24 21:42:40 +00:00

stellaris_enet.c

net: stellaris_enet: check packet length against receive buffer

2016-04-11 14:22:33 +01:00

vhost_net.c

vhost-user interrupt management fixes

2016-02-18 16:13:56 +02:00

virtio-net.c

Revert "virtio-net: unbreak self announcement and guest offloads after migration"

2016-08-05 15:23:40 -05:00

vmware_utils.h

fpu: Replace uint8 typedef with uint8_t

2016-01-22 15:09:21 +00:00

vmxnet3.c

Fix some typos found by codespell

2016-08-05 16:14:47 -05:00

vmxnet3.h

vmxnet3: Add support for VMXNET3_CMD_GET_ADAPTIVE_RING_INFO command

2015-10-12 13:19:29 +08:00

vmxnet_debug.h

net/vmxnet3: fix debug macro pattern for vmxnet3

2016-01-11 11:01:34 +08:00

vmxnet_rx_pkt.c

hw/net: Clean up includes

2016-01-29 15:07:23 +00:00

vmxnet_rx_pkt.h

Clean up includes some more

2016-03-22 22:20:16 +01:00

vmxnet_tx_pkt.c

net: vmxnet: use g_new for pkt initialisation

2016-09-08 15:29:37 -05:00

vmxnet_tx_pkt.h

Clean up includes some more

2016-03-22 22:20:16 +01:00

xen_nic.c

xen: Clean up includes

2016-01-29 15:07:23 +00:00

xgmac.c

arm: Clean up includes

2016-01-29 15:07:23 +00:00

xilinx_axienet.c

include/qemu/osdep.h: Don't include qapi/error.h

2016-03-22 22:20:15 +01:00

xilinx_ethlite.c

hw: explicitly include qemu-common.h and cpu.h

2016-03-22 22:20:17 +01:00