[v2] NBD patches through 2020-06-09

[PULL v2 0/3] NBD patches through 2020-06-09

Posted by Eric Blake 3 years, 10 months ago

The following changes since commit 31d321c2b3574dcc74e9f6411af06bca6b5d10f4:

  Merge remote-tracking branch 'remotes/philmd-gitlab/tags/sparc-next-20200609' into staging (2020-06-09 17:29:47 +0100)

are available in the Git repository at:

  https://repo.or.cz/qemu/ericb.git tags/pull-nbd-2020-06-09-v2

for you to fetch changes up to 5c86bdf1208916ece0b87e1151c9b48ee54faa3e:

  block: Call attention to truncation of long NBD exports (2020-06-10 12:58:59 -0500)

In v2: patch 2 adjusted per review (only sending the changed patch)

----------------------------------------------------------------
NBD patches for 2020-06-09

- fix iotest 194 race
- fix CVE-2020-10761: server DoS from assertion on long NBD error messages

----------------------------------------------------------------
Eric Blake (2):
      nbd/server: Avoid long error message assertions CVE-2020-10761
      block: Call attention to truncation of long NBD exports

Vladimir Sementsov-Ogievskiy (1):
      iotests: 194: wait for migration completion on target too

 block.c                    |  7 +++++--
 block/nbd.c                | 21 +++++++++++++--------
 nbd/server.c               | 23 ++++++++++++++++++++---
 tests/qemu-iotests/143     |  4 ++++
 tests/qemu-iotests/143.out |  2 ++
 tests/qemu-iotests/194     | 10 ++++++++++
 tests/qemu-iotests/194.out |  5 +++++
 7 files changed, 59 insertions(+), 13 deletions(-)

-- 
2.27.0

Re: [PULL v2 0/3] NBD patches through 2020-06-09

Posted by Peter Maydell 3 years, 10 months ago

On Wed, 10 Jun 2020 at 19:07, Eric Blake <eblake@redhat.com> wrote:
>
> The following changes since commit 31d321c2b3574dcc74e9f6411af06bca6b5d10f4:
>
>   Merge remote-tracking branch 'remotes/philmd-gitlab/tags/sparc-next-20200609' into staging (2020-06-09 17:29:47 +0100)
>
> are available in the Git repository at:
>
>   https://repo.or.cz/qemu/ericb.git tags/pull-nbd-2020-06-09-v2
>
> for you to fetch changes up to 5c86bdf1208916ece0b87e1151c9b48ee54faa3e:
>
>   block: Call attention to truncation of long NBD exports (2020-06-10 12:58:59 -0500)
>
> In v2: patch 2 adjusted per review (only sending the changed patch)
>
> ----------------------------------------------------------------
> NBD patches for 2020-06-09
>
> - fix iotest 194 race
> - fix CVE-2020-10761: server DoS from assertion on long NBD error messages
>



Applied, thanks.

Please update the changelog at https://wiki.qemu.org/ChangeLog/5.1
for any user-visible changes.

-- PMM

[PULL v2 2/3] nbd/server: Avoid long error message assertions CVE-2020-10761