)]}'
{
  "commit": "ecb1b7b082d3b7dceff0e486a114502fc52c0fdf",
  "tree": "0e5b330cfee52ea9e4ef8877931657cbd06c4c8a",
  "parents": [
    "9400601a689a128c25fa9c21e932562e0eeb7a26"
  ],
  "author": {
    "name": "Klaus Jensen",
    "email": "k.jensen@samsung.com",
    "time": "Thu Aug 03 20:44:23 2023 +0200"
  },
  "committer": {
    "name": "Klaus Jensen",
    "email": "k.jensen@samsung.com",
    "time": "Mon Aug 07 08:51:37 2023 +0200"
  },
  "message": "hw/nvme: fix oob memory read in fdp events log\n\nAs reported by Trend Micro\u0027s Zero Day Initiative, an oob memory read\nvulnerability exists in nvme_fdp_events(). The host-provided offset is\nnot verified.\n\nFix this.\n\nThis is only exploitable when Flexible Data Placement mode (fdp\u003don) is\nenabled.\n\nFixes: CVE-2023-4135\nFixes: 73064edfb864 (\"hw/nvme: flexible data placement emulation\")\nReported-by: Trend Micro\u0027s Zero Day Initiative\nSigned-off-by: Klaus Jensen \u003ck.jensen@samsung.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "f2e5a2fa737b418dac27c616d820f05c00b1376f",
      "old_mode": 33188,
      "old_path": "hw/nvme/ctrl.c",
      "new_id": "e9b5a55811b81837013228f2475a17bedfec237e",
      "new_mode": 33188,
      "new_path": "hw/nvme/ctrl.c"
    }
  ]
}