Michael S. Tsirkin c75e43b871 tsc210x: fix buffer overrun on invalid state load ... CVE-2013-4539 s->precision, nextprecision, function and nextfunction come from wire and are used as idx into resolution[] in TSC_CUT_RESOLUTION. Validate after load to avoid buffer overrun. Cc: Andreas Färber <afaerber@suse.de> Signed-off-by: Michael S. Tsirkin <mst@redhat.com> Signed-off-by: Juan Quintela <quintela@redhat.com> (cherry picked from commit 5193be3be3) Signed-off-by: Michael Roth <mdroth@linux.vnet.ibm.com>		2014-06-26 14:21:02 -05:00
..
Makefile.objs	hw: move timer devices to hw/timer/, configure with default-configs/	2013-04-08 18:13:14 +02:00
adb.c	hw: move target-independent files to subdirectories	2013-04-08 18:13:12 +02:00
hid.c	aio / timers: Switch entire codebase to the new timer API	2013-08-22 19:14:24 +02:00
lm832x.c	aio / timers: Switch entire codebase to the new timer API	2013-08-22 19:14:24 +02:00
milkymist-softusb.c	milkymist-softusb: QOM cast cleanup	2013-07-29 21:06:57 +02:00
pckbd.c	hw/i*: pass owner to memory_region_init* functions	2013-07-04 17:42:48 +02:00
pl050.c	pl050: QOM'ify pl050_keyboard and pl050_mouse	2013-07-29 21:06:57 +02:00
ps2.c	hw: move target-independent files to subdirectories	2013-04-08 18:13:12 +02:00
pxa2xx_keypad.c	memory: add owner argument to initialization functions	2013-07-04 17:42:44 +02:00
stellaris_input.c	arm: fix location of some include files	2013-04-15 15:16:01 +02:00
tsc210x.c	tsc210x: fix buffer overrun on invalid state load	2014-06-26 14:21:02 -05:00
tsc2005.c	aio / timers: Switch entire codebase to the new timer API	2013-08-22 19:14:24 +02:00
vmmouse.c	isa: Use realizefn for ISADevice	2013-06-07 12:14:45 +02:00