diff options
| author | Gerd Hoffmann <kraxel@redhat.com> | 2016-05-30 09:09:20 +0200 |
|---|---|---|
| committer | Gerd Hoffmann <kraxel@redhat.com> | 2016-06-06 09:04:24 +0200 |
| commit | 7e486f7577764a07aa35588e119903c80a5c30a2 (patch) | |
| tree | f7e294f10087d43fdc2bf94fb15ada823a483ed1 /include/hw/i2c | |
| parent | c2e3c54d3960bc53bfa3a5ce7ea7a050b9be267e (diff) | |
| download | qemu-7e486f7577764a07aa35588e119903c80a5c30a2.zip qemu-7e486f7577764a07aa35588e119903c80a5c30a2.tar.gz qemu-7e486f7577764a07aa35588e119903c80a5c30a2.tar.bz2 | |
vmsvga: shadow fifo registers
The fifo is normal ram. So kvm vcpu threads and qemu iothread can
access the fifo in parallel without syncronization. Which in turn
implies we can't use the fifo pointers in-place because the guest
can try changing them underneath us. So add shadows for them, to
make sure the guest can't modify them after we've applied sanity
checks.
Fixes: CVE-2016-4454
Cc: qemu-stable@nongnu.org
Cc: P J P <ppandit@redhat.com>
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Message-id: 1464592161-18348-4-git-send-email-kraxel@redhat.com
Diffstat (limited to 'include/hw/i2c')
0 files changed, 0 insertions, 0 deletions