diff options
| author |   Sebastian Krahmer <krahmer@suse.de> | 2014-09-15 18:40:07 +0200 |
|---|---|---|
| committer |   Paolo Bonzini <pbonzini@redhat.com> | 2014-10-31 17:02:07 +0100 |
| commit | 34bc07c5282a631c2663ae1ded0a186f46f64612 (patch) | |
| tree | d1f353ba01de082bd983f54206f449ae7c657271 /scripts/switch-timer-api | |
| parent | ivshmem: validate incoming_posn value from server (diff) | |
| download | qemu-34bc07c5282a631c2663ae1ded0a186f46f64612.tar.xz qemu-34bc07c5282a631c2663ae1ded0a186f46f64612.zip | |
ivshmem: Fix potential OOB r/w access
Fix OOB access via malformed incoming_posn parameters
and check that requested memory is actually alloc'ed.
Signed-off-by: Sebastian Krahmer <krahmer@suse.de>
[AF: Rebased, cleanups, avoid fd leak]
Cc: qemu-stable@nongnu.org
Signed-off-by: Andreas Färber <afaerber@suse.de>
Reviewed-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Diffstat (limited to 'scripts/switch-timer-api')
0 files changed, 0 insertions, 0 deletions