Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <alpine.LFD.2.20.1512161049320.11043@wniryva>
Date: Wed, 16 Dec 2015 10:50:39 +0530 (IST)
From: P J P <ppandit@...hat.com>
To: oss security list <oss-security@...ts.openwall.com>
cc: cve-assign@...re.org, luodalongde@...il.com
Subject: Re: Re: CVE request Qemu: net: vmxnet3: host memory
 leakage

+-- On Tue, 15 Dec 2015, cve-assign@...re.org wrote --+
| >> I've added a check in vmxnet3_deactivate_device() to avoid double free.
| 
| We think this may mean that the double free existed only in an early
| version of the patch, and did not exist in any shipped QEMU code.

Yes, that's right. Thank you.
--
Prasad J Pandit / Red Hat Product Security Team
47AF CE69 3A90 54AA 9045 1053 DD13 3D32 FE5B 041F

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.