diff options
| author | Peter Maydell | 2014-02-26 18:19:57 +0100 |
|---|---|---|
| committer | Peter Maydell | 2014-02-26 18:19:57 +0100 |
| commit | ec1efab95767312ff4afb816d0d4b548e093b031 (patch) | |
| tree | 1e9223fb627f164f7be8badbb33e3559c6330b1e /linux-headers/linux | |
| parent | xilinx: Delete hw/include/xilinx.h (diff) | |
| download | qemu-ec1efab95767312ff4afb816d0d4b548e093b031.tar.gz qemu-ec1efab95767312ff4afb816d0d4b548e093b031.tar.xz qemu-ec1efab95767312ff4afb816d0d4b548e093b031.zip | |
hw/misc/arm_sysctl: Fix bad boundary check on mb clock accesses
Fix incorrect use of sizeof() rather than ARRAY_SIZE() to guard
accesses into the mb_clock[] array, which was allowing a malicious
guest to overwrite the end of the array.
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
Reviewed-by: Paolo Bonzini <pbonzini@redhat.com>
Reviewed-by: Andreas Färber <afaerber@suse.de>
Message-id: 1392647854-8067-2-git-send-email-peter.maydell@linaro.org
Cc: qemu-stable@nongnu.org
Diffstat (limited to 'linux-headers/linux')
0 files changed, 0 insertions, 0 deletions