]> Git Repo - qemu.git/commit
sd: sdhci: check data length during dma_memory_read
authorPrasad J Pandit <[email protected]>
Tue, 7 Feb 2017 18:29:59 +0000 (18:29 +0000)
committerPeter Maydell <[email protected]>
Tue, 7 Feb 2017 18:29:59 +0000 (18:29 +0000)
commit42922105beb14c2fc58185ea022b9f72fb5465e9
tree3b115f72243dfbd716aa1d823bcde2ba30af0635
parent013befe1ca055f555062c8ead083b3c214be97b1
sd: sdhci: check data length during dma_memory_read

While doing multi block SDMA transfer in routine
'sdhci_sdma_transfer_multi_blocks', the 's->fifo_buffer' starting
index 'begin' and data length 's->data_count' could end up to be same.
This could lead to an OOB access issue. Correct transfer data length
to avoid it.

Cc: [email protected]
Reported-by: Jiang Xin <[email protected]>
Signed-off-by: Prasad J Pandit <[email protected]>
Reviewed-by: Peter Maydell <[email protected]>
Message-id: 20170130064736[email protected]
Signed-off-by: Peter Maydell <[email protected]>
hw/sd/sdhci.c
This page took 0.025943 seconds and 4 git commands to generate.