Messages in this thread | | | Subject | Re: [PATCH v2 3/3] xen/blkfront: don't trust the backend response data blindly | From | Juergen Gross <> | Date | Fri, 30 Jul 2021 12:31:07 +0200 |
| |
On 30.07.21 12:08, Juergen Gross wrote: > On 08.07.21 14:43, Juergen Gross wrote: >> Today blkfront will trust the backend to send only sane response data. >> In order to avoid privilege escalations or crashes in case of malicious >> backends verify the data to be within expected limits. Especially make >> sure that the response always references an outstanding request. >> >> Introduce a new state of the ring BLKIF_STATE_ERROR which will be >> switched to in case an inconsistency is being detected. Recovering from >> this state is possible only via removing and adding the virtual device >> again (e.g. via a suspend/resume cycle). >> >> Signed-off-by: Juergen Gross <jgross@suse.com> > > Any comments for this patch?
Please ignore this request for comments, I already got some.
Juergen [unhandled content-type:application/pgp-keys][unhandled content-type:application/pgp-signature] | |