diff options
author | Gerd Hoffmann <kraxel@redhat.com> | 2017-07-03 13:15:49 +0200 |
---|---|---|
committer | Gerd Hoffmann <kraxel@redhat.com> | 2017-07-17 11:39:08 +0200 |
commit | 2a7f2630684ee556a394a354d64159a4470c0151 (patch) | |
tree | 9406e3e91d13003420395c97f93b08233999f3a5 /hw | |
parent | 6e2c46334385c7e295ac883c801c81b4925fb54f (diff) | |
download | qemu-2a7f2630684ee556a394a354d64159a4470c0151.zip qemu-2a7f2630684ee556a394a354d64159a4470c0151.tar.gz qemu-2a7f2630684ee556a394a354d64159a4470c0151.tar.bz2 |
ehci: add sanity check for maxframes
Reported-by: Peter Maydell <peter.maydell@linaro.org>
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Reviewed-by: Peter Maydell <peter.maydell@linaro.org>
Message-id: 20170703111549.10924-1-kraxel@redhat.com
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Diffstat (limited to 'hw')
-rw-r--r-- | hw/usb/hcd-ehci.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/hw/usb/hcd-ehci.c b/hw/usb/hcd-ehci.c index 73090e0..604912c 100644 --- a/hw/usb/hcd-ehci.c +++ b/hw/usb/hcd-ehci.c @@ -2483,6 +2483,11 @@ void usb_ehci_realize(EHCIState *s, DeviceState *dev, Error **errp) NB_PORTS); return; } + if (s->maxframes < 8 || s->maxframes > 512) { + error_setg(errp, "maxframes %d out if range (8 .. 512)", + s->maxframes); + return; + } usb_bus_new(&s->bus, sizeof(s->bus), s->companion_enable ? &ehci_bus_ops_companion : &ehci_bus_ops_standalone, dev); |