diff options
| author | Eduardo Habkost | 2018-11-30 13:28:44 +0100 |
|---|---|---|
| committer | Eduardo Habkost | 2018-12-11 18:45:22 +0100 |
| commit | ffa144b3af448a10b96f3ee5bdf3048d2599b7ef (patch) | |
| tree | 3fb273251503969034ccd938fd3e6b04e474dcc6 /include/hw/arm/digic.h | |
| parent | numa: Match struct to typedef name (diff) | |
| download | qemu-ffa144b3af448a10b96f3ee5bdf3048d2599b7ef.tar.gz qemu-ffa144b3af448a10b96f3ee5bdf3048d2599b7ef.tar.xz qemu-ffa144b3af448a10b96f3ee5bdf3048d2599b7ef.zip | |
hostmem: Validate host-nodes before setting bitmap
host_memory_backend_set_host_nodes() was not validating
host-nodes before writing to backend->host_nodes, making QEMU
write beyond the end of the bitmap.
Fix the crash and add a simple regression test for the fix.
While at it, fix memory leak of the list returned by
visit_type_uint16List().
Reported-by: Markus Armbruster <armbru@redhat.com>
Signed-off-by: Eduardo Habkost <ehabkost@redhat.com>
Message-Id: <20181130122844.29103-1-ehabkost@redhat.com>
Reviewed-by: Stefano Garzarella <sgarzare@redhat.com>
Reviewed-by: David Hildenbrand <david@redhat.com>
Reviewed-by: Igor Mammedov <imammedo@redhat.com>
[ehabkost: removed test case code]
Signed-off-by: Eduardo Habkost <ehabkost@redhat.com>
Diffstat (limited to 'include/hw/arm/digic.h')
0 files changed, 0 insertions, 0 deletions