Gordon Tetlow
39040a9ec4
Always treat firmware request and response sizes as unsigned. ...
This fixes an incomplete bounds check on the guest-supplied request
size where a very large request size could be interpreted as a negative
value and not be caught by the bounds check.
Submitted by: jhb
Reported by: Reno Robert
Approved by: so
Security: FreeBSD-SA-18:14.bhyve
Security: CVE-2018-17160
2018-12-04 18:28:25 +00:00
2018-10-27 17:21:13 +00:00
2018-12-04 18:28:25 +00:00
2018-11-27 14:58:19 +00:00
2018-10-28 19:29:07 +00:00
2018-10-28 22:09:18 +00:00
2018-11-14 00:21:49 +00:00
2018-11-30 19:40:16 +00:00
2018-11-14 08:45:48 +00:00
2018-10-27 05:26:09 +00:00
2018-11-09 13:47:06 +00:00
2018-10-26 23:44:39 +00:00
2018-11-27 10:31:29 +00:00
2018-10-31 17:37:54 +00:00
2018-11-30 19:40:16 +00:00
2018-11-27 17:51:50 +00:00
2018-11-09 15:02:53 +00:00
2018-10-20 17:22:04 +00:00
2018-11-27 10:31:29 +00:00
2018-11-14 19:06:43 +00:00
2018-10-22 02:34:10 +00:00
2018-11-03 18:03:24 +00:00
2018-11-29 16:49:56 +00:00
2018-11-04 06:39:01 +00:00
2018-10-26 19:16:17 +00:00
2018-11-27 09:41:47 +00:00
2018-11-14 18:38:27 +00:00
2018-11-11 00:39:20 +00:00
2018-10-25 08:05:53 +00:00
2018-10-21 14:23:56 +00:00
2018-10-21 00:48:38 +00:00
2018-11-03 18:03:24 +00:00
2018-10-25 21:45:24 +00:00
2018-11-04 19:24:49 +00:00
2018-11-02 22:23:25 +00:00
2018-11-27 09:46:01 +00:00
2018-10-20 16:59:43 +00:00
2018-12-01 03:20:10 +00:00
39040a9ec4