From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-3.8 required=3.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_HELO_NONE, SPF_PASS autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 8F7BFC433F5 for ; Fri, 10 Sep 2021 10:20:04 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id 7548B610C8 for ; Fri, 10 Sep 2021 10:20:04 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S232249AbhIJKVN (ORCPT ); Fri, 10 Sep 2021 06:21:13 -0400 Received: from out5-smtp.messagingengine.com ([66.111.4.29]:37281 "EHLO out5-smtp.messagingengine.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S232094AbhIJKVM (ORCPT ); Fri, 10 Sep 2021 06:21:12 -0400 Received: from compute5.internal (compute5.nyi.internal [10.202.2.45]) by mailout.nyi.internal (Postfix) with ESMTP id 183FC5C0151; Fri, 10 Sep 2021 06:20:01 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute5.internal (MEProxy); Fri, 10 Sep 2021 06:20:01 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; bh=NrqFJE A7K6DO9LA/zODEzDVYxlIRo+E5W5azI/AS25s=; b=gnCMg5Sa3W3YRGREGMaFBI kjYQ38F7khqobc9HZSyAeTpG0otGcxXMaEDKFfOntPPw8u9uq5TUK6f/PVe5uFU/ vhUgu0VRVgVC0hqcNvU4sAgJMZvx1xwfIA9toHcVz7QFcmxTVqapFu+/uowYJSLl 7+qhj6GzQ4Ic5197tOIRPKcqUxDlwUEEA0JOA+SzHsKoKD67pV1F88SG4/4RMTa+ rZE/jGJGBztORg9Vp3s7DDyL+SNIWRmt4P9bG/+CfjZpLMGBMaZdpgeu7TlQtjRF w+72l5LepDSEkt7Jx4sjlJjfNpMx1ib2DMLuIdA63I/tbiQZEjoP/g3Vr3FgvSqA == X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvtddrudeguddgvdehucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne cujfgurhepfffhvffukfhfgggtuggjsehgtderredttdejnecuhfhrohhmpeforghrvghk ucforghrtgiihihkohifshhkihdqifpkrhgvtghkihcuoehmrghrmhgrrhgvkhesihhnvh hishhisghlvghthhhinhhgshhlrggsrdgtohhmqeenucggtffrrghtthgvrhhnpeetveff iefghfekhffggeeffffhgeevieektedthfehveeiheeiiedtudegfeetffenucevlhhush htvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehmrghrmhgrrhgvkhes ihhnvhhishhisghlvghthhhinhhgshhlrggsrdgtohhm X-ME-Proxy: Received: by mail.messagingengine.com (Postfix) with ESMTPA; Fri, 10 Sep 2021 06:19:59 -0400 (EDT) Date: Fri, 10 Sep 2021 12:19:56 +0200 From: Marek =?utf-8?Q?Marczykowski-G=C3=B3recki?= To: Jan Beulich Cc: Juergen Gross , Boris Ostrovsky , Stefano Stabellini , "David S. Miller" , Jakub Kicinski , xen-devel@lists.xenproject.org, netdev@vger.kernel.org, linux-kernel@vger.kernel.org Subject: Re: [PATCH v2 0/4] xen: harden netfront against malicious backends Message-ID: References: <20210824102809.26370-1-jgross@suse.com> <1f98d97c-1610-6a66-e269-29b2a9e41004@suse.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="a+WymmwsT1dAoNOc" Content-Disposition: inline In-Reply-To: <1f98d97c-1610-6a66-e269-29b2a9e41004@suse.com> Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org --a+WymmwsT1dAoNOc Content-Type: text/plain; protected-headers=v1; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Date: Fri, 10 Sep 2021 12:19:56 +0200 From: Marek =?utf-8?Q?Marczykowski-G=C3=B3recki?= To: Jan Beulich Cc: Juergen Gross , Boris Ostrovsky , Stefano Stabellini , "David S. Miller" , Jakub Kicinski , xen-devel@lists.xenproject.org, netdev@vger.kernel.org, linux-kernel@vger.kernel.org Subject: Re: [PATCH v2 0/4] xen: harden netfront against malicious backends On Tue, Aug 24, 2021 at 05:33:10PM +0200, Jan Beulich wrote: > On 24.08.2021 12:28, Juergen Gross wrote: > > It should be mentioned that a similar series has been posted some years > > ago by Marek Marczykowski-G=C3=B3recki, but this series has not been ap= plied > > due to a Xen header not having been available in the Xen git repo at > > that time. Additionally my series is fixing some more DoS cases. >=20 > With this, wouldn't it have made sense to Cc Marek, in case he wants to > check against his own version (which over time may have evolved and > hence not match the earlier submission anymore)? I have compared this, and the blkfront series against my patches and they seem to cover exactly the same set of issues. Besides one comment I made separately, I think nothing is missing. Thanks! BTW, shouldn't those those patches land in stable branches too? In some threat models, I'd qualify them as security fixes. --=20 Best Regards, Marek Marczykowski-G=C3=B3recki Invisible Things Lab --a+WymmwsT1dAoNOc Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEhrpukzGPukRmQqkK24/THMrX1ywFAmE7MU0ACgkQ24/THMrX 1yyPgwf/UhMrTFQDi4aAO939ZYoIqkqGRgzJvXk3uKeBm1e3Cja+W310tHHN9YcV jArR36lzQkV9/DzUSIE/OTvtxJ4kw/5/iGOaDNTAZhpr7AVU0JTjOhJSD0FINqeh V2/97cuouBTK69DRBoB7XPhGgeM6qhhkJIKns9alnvsXy3Xjdar7SHg4GjWBWIEV aSPQwiac1JCoGQC4y0U2Ke1WT81ozbztAZCSoYORTzmwzRNwufuf0n1kgfdt1LK/ 2s01e4WJebsYowlqTDYZNPKL0L0qyHj9XMeIHjuBZG2Xa86k/Q5RwEN3rAMtsH6O L2eIsY98ExjJmqH29Og0/EqbOeoCSg== =HpA0 -----END PGP SIGNATURE----- --a+WymmwsT1dAoNOc--