aboutsummaryrefslogtreecommitdiff
path: root/docs/igd-assign.txt
diff options
context:
space:
mode:
authorPrasad J Pandit <pjp@fedoraproject.org>2017-02-07 18:29:59 +0000
committerPeter Maydell <peter.maydell@linaro.org>2017-02-07 18:29:59 +0000
commit42922105beb14c2fc58185ea022b9f72fb5465e9 (patch)
tree3b115f72243dfbd716aa1d823bcde2ba30af0635 /docs/igd-assign.txt
parent013befe1ca055f555062c8ead083b3c214be97b1 (diff)
downloadqemu-42922105beb14c2fc58185ea022b9f72fb5465e9.zip
qemu-42922105beb14c2fc58185ea022b9f72fb5465e9.tar.gz
qemu-42922105beb14c2fc58185ea022b9f72fb5465e9.tar.bz2
sd: sdhci: check data length during dma_memory_read
While doing multi block SDMA transfer in routine 'sdhci_sdma_transfer_multi_blocks', the 's->fifo_buffer' starting index 'begin' and data length 's->data_count' could end up to be same. This could lead to an OOB access issue. Correct transfer data length to avoid it. Cc: qemu-stable@nongnu.org Reported-by: Jiang Xin <jiangxin1@huawei.com> Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org> Reviewed-by: Peter Maydell <peter.maydell@linaro.org> Message-id: 20170130064736.9236-1-ppandit@redhat.com Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
Diffstat (limited to 'docs/igd-assign.txt')
0 files changed, 0 insertions, 0 deletions