From 33b081e2947db6117b27f8c76544a756053f5514 Mon Sep 17 00:00:00 2001 From: Akihiko Odaki Date: Mon, 29 Jan 2024 17:03:08 +0900 Subject: hw/smbios: Fix port connector option validation qemu_smbios_type8_opts did not have the list terminator and that resulted in out-of-bound memory access. It also needs to have an element for the type option. Cc: qemu-stable@nongnu.org Fixes: fd8caa253c56 ("hw/smbios: support for type 8 (port connector)") Signed-off-by: Akihiko Odaki Reviewed-by: Michael Tokarev Message-Id: <20240129-smbios-v2-2-9ee6fede0d10@daynix.com> Reviewed-by: Ani Sinha Reviewed-by: Michael S. Tsirkin Signed-off-by: Michael S. Tsirkin --- hw/smbios/smbios.c | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'hw') diff --git a/hw/smbios/smbios.c b/hw/smbios/smbios.c index a9048c1..a3c4e52 100644 --- a/hw/smbios/smbios.c +++ b/hw/smbios/smbios.c @@ -353,6 +353,11 @@ static const QemuOptDesc qemu_smbios_type4_opts[] = { static const QemuOptDesc qemu_smbios_type8_opts[] = { { + .name = "type", + .type = QEMU_OPT_NUMBER, + .help = "SMBIOS element type", + }, + { .name = "internal_reference", .type = QEMU_OPT_STRING, .help = "internal reference designator", @@ -372,6 +377,7 @@ static const QemuOptDesc qemu_smbios_type8_opts[] = { .type = QEMU_OPT_NUMBER, .help = "port type", }, + { /* end of list */ } }; static const QemuOptDesc qemu_smbios_type11_opts[] = { -- cgit v1.1