xen/netfront: don't read data from request on the ring page
authorJuergen Gross <jgross@suse.com>
Tue, 24 Aug 2021 10:28:07 +0000 (12:28 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 1 Dec 2021 08:19:09 +0000 (09:19 +0100)
commite17ee047eea7122c1d4196ed39032e517dad4152
treec17964c6776203b3c25204337656388eb255afdb
parentf5e493709800243181e268ddbfae949d2cc37f0b
xen/netfront: don't read data from request on the ring page

commit 162081ec33c2686afa29d91bf8d302824aa846c7 upstream.

In order to avoid a malicious backend being able to influence the local
processing of a request build the request locally first and then copy
it to the ring page. Any reading from the request influencing the
processing in the frontend needs to be done on the local instance.

Signed-off-by: Juergen Gross <jgross@suse.com>
Reviewed-by: Jan Beulich <jbeulich@suse.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/net/xen-netfront.c