d/numam-dpdk
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
2d962bb736
numam-dpdk/lib
History
Fan Zhang 2d962bb736 vhost/crypto: fix possible TOCTOU attack 
This patch fixes the possible time-of-check to time-of-use (TOCTOU)
attack problem by copying request data and descriptor index to local
variable prior to process.

Also the original sequential read of descriptors may lead to TOCTOU
attack. This patch fixes the problem by loading all descriptors of a
request to local buffer before processing.

CVE-2020-14375
Fixes: 3bb595ecd6 ("vhost/crypto: add request handler")
Cc: stable@dpdk.org

Signed-off-by: Fan Zhang <roy.fan.zhang@intel.com>
Acked-by: Chenbo Xia <chenbo.xia@intel.com>
2020-09-28 13:19:13 +02:00
..
librte_acl build: remove deprecated cpuflag macros 2020-09-25 11:13:57 +02:00
librte_bbdev bbdev: use C11 atomics for device processing counter 2020-09-25 15:37:55 +02:00
librte_bitratestats build: remove makefiles 2020-09-08 00:09:50 +02:00
librte_bpf bpf: promote library as stable 2020-09-16 18:52:55 +02:00
librte_cfgfile build: remove makefiles 2020-09-08 00:09:50 +02:00
librte_cmdline build: remove makefiles 2020-09-08 00:09:50 +02:00
librte_compressdev build: remove makefiles 2020-09-08 00:09:50 +02:00
librte_cryptodev build: remove makefiles 2020-09-08 00:09:50 +02:00
librte_distributor build: remove makefiles 2020-09-08 00:09:50 +02:00
librte_eal eal: use C11 atomics for initialization check 2020-09-25 15:36:17 +02:00
librte_efd build: remove deprecated cpuflag macros 2020-09-25 11:13:57 +02:00
librte_ethdev ethdev: use C11 atomics for link status 2020-09-25 15:42:34 +02:00
librte_eventdev build: remove makefiles 2020-09-08 00:09:50 +02:00
librte_fib build: remove makefiles 2020-09-08 00:09:50 +02:00
librte_flow_classify build: remove makefiles 2020-09-08 00:09:50 +02:00
librte_graph build: remove makefiles 2020-09-08 00:09:50 +02:00
librte_gro build: remove makefiles 2020-09-08 00:09:50 +02:00
librte_gso gso: fix payload unit size for UDP 2020-09-18 18:55:12 +02:00
librte_hash build: remove deprecated cpuflag macros 2020-09-25 11:13:57 +02:00
librte_ip_frag build: remove makefiles 2020-09-08 00:09:50 +02:00
librte_ipsec build: remove makefiles 2020-09-08 00:09:50 +02:00
librte_jobstats build: remove makefiles 2020-09-08 00:09:50 +02:00
librte_kni mem: remove physical address aliases 2020-09-19 00:25:35 +02:00
librte_kvargs build: remove makefiles 2020-09-08 00:09:50 +02:00
librte_latencystats build: remove makefiles 2020-09-08 00:09:50 +02:00
librte_lpm build: remove makefiles 2020-09-08 00:09:50 +02:00
librte_mbuf mbuf: remove physical address alias 2020-09-19 00:25:37 +02:00
librte_member build: remove deprecated cpuflag macros 2020-09-25 11:13:57 +02:00
librte_mempool mempool: remove physical address aliases 2020-09-19 00:25:37 +02:00
librte_meter build: remove makefiles 2020-09-08 00:09:50 +02:00
librte_metrics build: remove makefiles 2020-09-08 00:09:50 +02:00
librte_net build: remove deprecated cpuflag macros 2020-09-25 11:13:57 +02:00
librte_node build: remove deprecated cpuflag macros 2020-09-25 11:13:57 +02:00
librte_pci pci: move resource mapping to the PCI bus 2020-09-21 10:12:10 +02:00
librte_pdump build: remove makefiles 2020-09-08 00:09:50 +02:00
librte_pipeline build: remove makefiles 2020-09-08 00:09:50 +02:00
librte_port build: remove makefiles 2020-09-08 00:09:50 +02:00
librte_power power: use C11 atomics for power state 2020-09-25 15:42:29 +02:00
librte_rawdev rawdev: mark start and stop functions optional 2020-09-11 11:51:16 +02:00
librte_rcu build: remove makefiles 2020-09-08 00:09:50 +02:00
librte_regexdev build: remove makefiles 2020-09-08 00:09:50 +02:00
librte_reorder build: remove makefiles 2020-09-08 00:09:50 +02:00
librte_rib build: remove makefiles 2020-09-08 00:09:50 +02:00
librte_ring config: remove default configs used with make 2020-09-08 00:11:30 +02:00
librte_sched build: remove deprecated cpuflag macros 2020-09-25 11:13:57 +02:00
librte_security build: remove makefiles 2020-09-08 00:09:50 +02:00
librte_stack build: remove makefiles 2020-09-08 00:09:50 +02:00
librte_table build: remove deprecated cpuflag macros 2020-09-25 11:13:57 +02:00
librte_telemetry telemetry: build stubs on Windows 2020-09-11 01:55:35 +02:00
librte_timer build: remove makefiles 2020-09-08 00:09:50 +02:00
librte_vhost vhost/crypto: fix possible TOCTOU attack 2020-09-28 13:19:13 +02:00
meson.build ethdev: build on Windows 2020-09-11 01:55:39 +02:00