On 08/06/2013 10:26 PM, Isaku Yamahata wrote:
RDMAControlHeader::len is remote-provided. So validate the value before use.Isaku Yamahata (3): rdma: use resp.len after validation in qemu_rdma_registration_stop rdma: validate RDMAControlHeader::len rdma: check if RDMAControlHeader::len match transferred byte migration-rdma.c | 44 ++++++++++++++++++++++++++++++-------------- 1 file changed, 30 insertions(+), 14 deletions(-)
Thank you. I will apply to my tree and re-send. - Michael