aboutsummaryrefslogtreecommitdiff
path: root/hw/smbios
diff options
context:
space:
mode:
authorAkihiko Odaki <akihiko.odaki@daynix.com>2024-01-29 17:03:08 +0900
committerMichael Tokarev <mjt@tls.msk.ru>2024-02-13 10:59:25 +0300
commit196578c9d051d19c23e6c13e97b791a41b318315 (patch)
treef55007ec8c189505dd4ff3ccbf92b5f74b4fb938 /hw/smbios
parentcd8a35b913c24248267c682cb9a348461c106139 (diff)
downloadqemu-196578c9d051d19c23e6c13e97b791a41b318315.zip
qemu-196578c9d051d19c23e6c13e97b791a41b318315.tar.gz
qemu-196578c9d051d19c23e6c13e97b791a41b318315.tar.bz2
hw/smbios: Fix port connector option validation
qemu_smbios_type8_opts did not have the list terminator and that resulted in out-of-bound memory access. It also needs to have an element for the type option. Cc: qemu-stable@nongnu.org Fixes: fd8caa253c56 ("hw/smbios: support for type 8 (port connector)") Signed-off-by: Akihiko Odaki <akihiko.odaki@daynix.com> Reviewed-by: Michael Tokarev <mjt@tls.msk.ru> Reviewed-by: Ani Sinha <anisinha@redhat.com> Reviewed-by: Michael S. Tsirkin <mst@redhat.com> Signed-off-by: Michael Tokarev <mjt@tls.msk.ru>
Diffstat (limited to 'hw/smbios')
-rw-r--r--hw/smbios/smbios.c6
1 files changed, 6 insertions, 0 deletions
diff --git a/hw/smbios/smbios.c b/hw/smbios/smbios.c
index a9048c1..a3c4e52 100644
--- a/hw/smbios/smbios.c
+++ b/hw/smbios/smbios.c
@@ -353,6 +353,11 @@ static const QemuOptDesc qemu_smbios_type4_opts[] = {
static const QemuOptDesc qemu_smbios_type8_opts[] = {
{
+ .name = "type",
+ .type = QEMU_OPT_NUMBER,
+ .help = "SMBIOS element type",
+ },
+ {
.name = "internal_reference",
.type = QEMU_OPT_STRING,
.help = "internal reference designator",
@@ -372,6 +377,7 @@ static const QemuOptDesc qemu_smbios_type8_opts[] = {
.type = QEMU_OPT_NUMBER,
.help = "port type",
},
+ { /* end of list */ }
};
static const QemuOptDesc qemu_smbios_type11_opts[] = {