xen/netfront: don't read data from request on the ring page

Browse source

In order to avoid a malicious backend being able to influence the local
processing of a request build the request locally first and then copy
it to the ring page. Any reading from the request influencing the
processing in the frontend needs to be done on the local instance.

Signed-off-by: Juergen Gross <jgross@suse.com>
Reviewed-by: Jan Beulich <jbeulich@suse.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

...

This commit is contained in:

Juergen Gross 2021-08-24 12:28:07 +02:00 • committed by David S. Miller

parent 8446066bf8

commit 162081ec33

1 changed files with 42 additions and 44 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

86

drivers/net/xen-netfront.c

View file