diff options
| author | Thomas Huth | 2020-06-15 09:26:29 +0200 |
|---|---|---|
| committer | Paolo Bonzini | 2020-06-26 15:39:37 +0200 |
| commit | ee760ac80ac1f130138e8eb4eba263a4d48ace51 (patch) | |
| tree | bf55873da6be7148d07ada7e2c28a2271e44eb5b /Makefile | |
| parent | docs/nvdimm: add description of alignment requirement of device dax (diff) | |
| download | qemu-ee760ac80ac1f130138e8eb4eba263a4d48ace51.tar.gz qemu-ee760ac80ac1f130138e8eb4eba263a4d48ace51.tar.xz qemu-ee760ac80ac1f130138e8eb4eba263a4d48ace51.zip | |
hw/scsi/megasas: Fix possible out-of-bounds array access in tracepoints
Some tracepoints in megasas.c use a guest-controlled value as an index
into the mfi_frame_desc[] array. Thus a malicious guest could cause an
out-of-bounds error here. Fortunately, the impact is very low since this
can only happen when the corresponding tracepoints have been enabled
before, but the problem should be fixed anyway with a proper check.
Buglink: https://bugs.launchpad.net/qemu/+bug/1882065
Signed-off-by: Thomas Huth <thuth@redhat.com>
Message-Id: <20200615072629.32321-1-thuth@redhat.com>
Reviewed-by: Philippe Mathieu-Daudé <f4bug@amsat.org>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Diffstat (limited to 'Makefile')
0 files changed, 0 insertions, 0 deletions