]> git.proxmox.com Git - mirror_qemu.git/commit
projects / mirror_qemu.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 10ae9d7) | patch
usb: check page select value while processing iTD
authorPrasad J Pandit <pjp@fedoraproject.org>
Tue, 19 Jan 2016 19:56:46 +0000 (01:26 +0530)
committerGerd Hoffmann <kraxel@redhat.com>
Tue, 2 Feb 2016 13:11:01 +0000 (14:11 +0100)
commit49d925ce50383a286278143c05511d30ec41a36e
tree62fe3c379d0f7fd801958d5d46c9ca2a1af860aftree
parent10ae9d76388e3f4a31f6a1475b5e2d1f28404a10commit | diff
usb: check page select value while processing iTD

While processing isochronous transfer descriptors(iTD), the page
select(PG) field value could lead to an OOB read access. Add
check to avoid it.

Reported-by: Qinghao Tang <luodalongde@gmail.com>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Message-id: 1453233406-12165-1-git-send-email-ppandit@redhat.com
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
hw/usb/hcd-ehci.c diff | blob | blame | history
QEMU mirror