diff options
| author | Volker Rümelin <vr_qemu@t-online.de> | 2024-09-01 15:01:12 +0200 |
|---|---|---|
| committer | Michael S. Tsirkin <mst@redhat.com> | 2024-09-11 09:46:14 -0400 |
| commit | 7fc6611cad3e9627b23ce83e550b668abba6c886 (patch) | |
| tree | 8eeedc8e703aa3571877cbe99b959ccc1c3575e0 /hw/m68k/next-cube.c | |
| parent | d29b7f3dd4f95da7173b3f0fb58a7d4dbb093f92 (diff) | |
| download | qemu-7fc6611cad3e9627b23ce83e550b668abba6c886.zip qemu-7fc6611cad3e9627b23ce83e550b668abba6c886.tar.gz qemu-7fc6611cad3e9627b23ce83e550b668abba6c886.tar.bz2 | |
hw/audio/virtio-sound: fix heap buffer overflow
Currently, the guest may write to the device configuration space,
whereas the virtio sound device specification in chapter 5.14.4
clearly states that the fields in the device configuration space
are driver-read-only.
Remove the set_config function from the virtio_snd class.
This also prevents a heap buffer overflow. See QEMU issue #2296.
Resolves: https://gitlab.com/qemu-project/qemu/-/issues/2296
Signed-off-by: Volker Rümelin <vr_qemu@t-online.de>
Message-Id: <20240901130112.8242-1-vr_qemu@t-online.de>
Reviewed-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Diffstat (limited to 'hw/m68k/next-cube.c')
0 files changed, 0 insertions, 0 deletions