xemu/hw/ssi
Michael S. Tsirkin f217f379a8 pl022: fix buffer overun on invalid state load
CVE-2013-4530

pl022.c did not bounds check tx_fifo_head and
rx_fifo_head after loading them from file and
before they are used to dereference array.

Reported-by: Michael S. Tsirkin <mst@redhat.com
Reported-by: Anthony Liguori <anthony@codemonkey.ws>
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Juan Quintela <quintela@redhat.com>
(cherry picked from commit d8d0a0bc7e)
Signed-off-by: Michael Roth <mdroth@linux.vnet.ibm.com>
2014-06-26 14:02:16 -05:00
..
Makefile.objs hw: move SSI controllers to hw/ssi/, configure via default-configs/ 2013-04-08 18:13:13 +02:00
omap_spi.c memory: add owner argument to initialization functions 2013-07-04 17:42:44 +02:00
pl022.c pl022: fix buffer overun on invalid state load 2014-06-26 14:02:16 -05:00
ssi.c qdev: Drop FROM_QBUS() macro 2013-06-07 14:55:33 +02:00
xilinx_spi.c xilinx_spi: QOM cast cleanup 2013-07-29 21:07:01 +02:00
xilinx_spips.c hw/s*: pass owner to memory_region_init* functions 2013-07-04 17:42:48 +02:00