)]}'
{
  "commit": "5d85a09554fb66e18107cfbfa4e6b637bf4e2508",
  "tree": "99ef5b2df7c533ee5744eef25eb288d95a541e69",
  "parents": [
    "63c8024432efd587e8e135c73a1ed3c3ce0dc8be"
  ],
  "author": {
    "name": "Laurent Vivier",
    "email": "lvivier@redhat.com",
    "time": "Wed Jul 22 13:50:08 2026 +0200"
  },
  "committer": {
    "name": "Michael S. Tsirkin",
    "email": "mst@redhat.com",
    "time": "Fri Sep 11 15:54:46 2026 -0400"
  },
  "message": "hw/net/virtio-net: check packet size before VLAN tag access in receive_filter()\n\nreceive_filter() reads ptr[14..15] to extract the VLAN ID without\nchecking the packet is large enough. A short frame with VLAN TPID\nat bytes 12-13 but no VLAN TCI causes a 2-byte out-of-bounds read.\n\nAdd size checks before accessing the Ethernet header and the VLAN\ntag fields.\n\nCc: qemu-stable@nongnu.org\nResolves: https://gitlab.com/qemu-project/qemu/-/issues/3788\nFixes: f21c0ed97c97 (\"qemu:virtio-net: Add VLAN filtering (Alex Williamson)\")\nSigned-off-by: Laurent Vivier \u003clvivier@redhat.com\u003e\nReviewed-by: Philippe Mathieu-Daudé \u003cphilmd@oss.qualcomm.com\u003e\nReviewed-by: Michael S. Tsirkin \u003cmst@redhat.com\u003e\nSigned-off-by: Michael S. Tsirkin \u003cmst@redhat.com\u003e\nMessage-ID: \u003c20260722115008.1570510-1-lvivier@redhat.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "274fbcb0d606d3612993b8efbbde64bc2ed44e7b",
      "old_mode": 33188,
      "old_path": "hw/net/virtio-net.c",
      "new_id": "f3f375e1b29fa096626218b6cc294b9b8becd2c3",
      "new_mode": 33188,
      "new_path": "hw/net/virtio-net.c"
    }
  ]
}