diff options
| author | Mark Cave-Ayland <mark.cave-ayland@ilande.co.uk> | 2021-04-07 20:57:58 +0100 |
|---|---|---|
| committer | Mark Cave-Ayland <mark.cave-ayland@ilande.co.uk> | 2021-04-12 22:35:53 +0100 |
| commit | 0ebb5fd80589835153a0c2baa1b8cc7a04e67a93 (patch) | |
| tree | 3aa508aa2e1a85588b25a5e81291ab4e6beaead2 /target/hexagon | |
| parent | fbc6510e3379fa8f8370bf71198f0ce733bf07f9 (diff) | |
| download | qemu-0ebb5fd80589835153a0c2baa1b8cc7a04e67a93.zip qemu-0ebb5fd80589835153a0c2baa1b8cc7a04e67a93.tar.gz qemu-0ebb5fd80589835153a0c2baa1b8cc7a04e67a93.tar.bz2 | |
esp: don't overflow cmdfifo if TC is larger than the cmdfifo size
If a guest transfers the message out/command phase data using DMA with a TC
that is larger than the cmdfifo size then the cmdfifo overflows triggering
an assert. Limit the size of the transfer to the free space available in
cmdfifo.
Buglink: https://bugs.launchpad.net/qemu/+bug/1919036
Signed-off-by: Mark Cave-Ayland <mark.cave-ayland@ilande.co.uk>
Reviewed-by: Philippe Mathieu-Daudé <f4bug@amsat.org>
Tested-by: Alexander Bulekov <alxndr@bu.edu>
Message-Id: <20210407195801.685-10-mark.cave-ayland@ilande.co.uk>
Diffstat (limited to 'target/hexagon')
0 files changed, 0 insertions, 0 deletions