diff options
| author | Prasad J Pandit | 2017-12-13 18:59:26 +0100 |
|---|---|---|
| committer | Peter Maydell | 2017-12-13 18:59:26 +0100 |
| commit | d6c3768b32277559cf6424bdf1edfee1fbf9a970 (patch) | |
| tree | 4212eac44deda01b594a75622fb19f8f6f714cfb /include/hw | |
| parent | nvic: Make systick banked (diff) | |
| download | qemu-d6c3768b32277559cf6424bdf1edfee1fbf9a970.tar.gz qemu-d6c3768b32277559cf6424bdf1edfee1fbf9a970.tar.xz qemu-d6c3768b32277559cf6424bdf1edfee1fbf9a970.zip | |
hw/display/tc6393xb: limit irq handler index to TC6393XB_GPIOS
The ctz32() routine could return a value greater than
TC6393XB_GPIOS=16, because the device has 24 GPIO level
bits but we only implement 16 outgoing lines. This could
lead to an OOB array access. Mask 'level' to avoid it.
Reported-by: Moguofang <moguofang@huawei.com>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Message-id: 20171212041539.25700-1-ppandit@redhat.com
Reviewed-by: Peter Maydell <peter.maydell@linaro.org>
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
Diffstat (limited to 'include/hw')
0 files changed, 0 insertions, 0 deletions