diff options
| author | Akihiko Odaki <akihiko.odaki@daynix.com> | 2024-01-29 17:03:08 +0900 |
|---|---|---|
| committer | Michael Tokarev <mjt@tls.msk.ru> | 2024-02-13 10:59:25 +0300 |
| commit | 196578c9d051d19c23e6c13e97b791a41b318315 (patch) | |
| tree | f55007ec8c189505dd4ff3ccbf92b5f74b4fb938 /hw | |
| parent | cd8a35b913c24248267c682cb9a348461c106139 (diff) | |
| download | qemu-196578c9d051d19c23e6c13e97b791a41b318315.zip qemu-196578c9d051d19c23e6c13e97b791a41b318315.tar.gz qemu-196578c9d051d19c23e6c13e97b791a41b318315.tar.bz2 | |
hw/smbios: Fix port connector option validation
qemu_smbios_type8_opts did not have the list terminator and that
resulted in out-of-bound memory access. It also needs to have an element
for the type option.
Cc: qemu-stable@nongnu.org
Fixes: fd8caa253c56 ("hw/smbios: support for type 8 (port connector)")
Signed-off-by: Akihiko Odaki <akihiko.odaki@daynix.com>
Reviewed-by: Michael Tokarev <mjt@tls.msk.ru>
Reviewed-by: Ani Sinha <anisinha@redhat.com>
Reviewed-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Michael Tokarev <mjt@tls.msk.ru>
Diffstat (limited to 'hw')
| -rw-r--r-- | hw/smbios/smbios.c | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/hw/smbios/smbios.c b/hw/smbios/smbios.c index a9048c1..a3c4e52 100644 --- a/hw/smbios/smbios.c +++ b/hw/smbios/smbios.c @@ -353,6 +353,11 @@ static const QemuOptDesc qemu_smbios_type4_opts[] = { static const QemuOptDesc qemu_smbios_type8_opts[] = { { + .name = "type", + .type = QEMU_OPT_NUMBER, + .help = "SMBIOS element type", + }, + { .name = "internal_reference", .type = QEMU_OPT_STRING, .help = "internal reference designator", @@ -372,6 +377,7 @@ static const QemuOptDesc qemu_smbios_type8_opts[] = { .type = QEMU_OPT_NUMBER, .help = "port type", }, + { /* end of list */ } }; static const QemuOptDesc qemu_smbios_type11_opts[] = { |