88e79a2dfd
Recently MemReentrancyGuard was added to DeviceState to record that the device is engaging in I/O. The network device backend needs to update it when delivering a packet to a device. This implementation follows what bottom half does, but it does not add a tracepoint for the case that the network device backend started delivering a packet to a device which is already engaging in I/O. This is because such reentrancy frequently happens for qemu_flush_queued_packets() and is insignificant. Fixes: CVE-2023-3019 Reported-by: Alexander Bulekov <alxndr@bu.edu> Signed-off-by: Akihiko Odaki <akihiko.odaki@daynix.com> Acked-by: Alexander Bulekov <alxndr@bu.edu> Signed-off-by: Jason Wang <jasowang@redhat.com> (cherry picked from commit 9050f976e447444ea6ee2ba12c9f77e4b0dc54bc) Signed-off-by: Michael Tokarev <mjt@tls.msk.ru> |
||
|---|---|---|
| .. | ||
| can | ||
| announce.c | ||
| checksum.c | ||
| clients.h | ||
| colo-compare.c | ||
| colo-compare.h | ||
| colo.c | ||
| colo.h | ||
| dgram.c | ||
| dump.c | ||
| eth.c | ||
| filter-buffer.c | ||
| filter-mirror.c | ||
| filter-replay.c | ||
| filter-rewriter.c | ||
| filter.c | ||
| hub.c | ||
| hub.h | ||
| l2tpv3.c | ||
| meson.build | ||
| net-hmp-cmds.c | ||
| net.c | ||
| netmap.c | ||
| queue.c | ||
| slirp.c | ||
| socket.c | ||
| stream.c | ||
| tap-bsd.c | ||
| tap-linux.c | ||
| tap-linux.h | ||
| tap-solaris.c | ||
| tap-stub.c | ||
| tap-win32.c | ||
| tap.c | ||
| tap_int.h | ||
| trace-events | ||
| trace.h | ||
| util.c | ||
| util.h | ||
| vde.c | ||
| vhost-user-stub.c | ||
| vhost-user.c | ||
| vhost-vdpa-stub.c | ||
| vhost-vdpa.c | ||
| vmnet-bridged.m | ||
| vmnet-common.m | ||
| vmnet-host.c | ||
| vmnet-shared.c | ||
| vmnet_int.h | ||