]> Git Repo - qemu.git/commit
projects / qemu.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ead7a57) | patch
tsc210x: fix buffer overrun on invalid state load
authorMichael S. Tsirkin <[email protected]>
Thu, 3 Apr 2014 16:52:09 +0000 (19:52 +0300)
committerJuan Quintela <[email protected]>
Mon, 5 May 2014 20:15:02 +0000 (22:15 +0200)
commit5193be3be35f29a35bc465036cd64ad60d43385f
tree953551d2084760ed33b61ffa6b306d2dc214c172tree | snapshot
parentead7a57df37d2187813a121308213f41591bd811commit | diff
tsc210x: fix buffer overrun on invalid state load

CVE-2013-4539

s->precision, nextprecision, function and nextfunction
come from wire and are used
as idx into resolution[] in TSC_CUT_RESOLUTION.

Validate after load to avoid buffer overrun.

Cc: Andreas Färber <[email protected]>
Signed-off-by: Michael S. Tsirkin <[email protected]>
Signed-off-by: Juan Quintela <[email protected]>
hw/input/tsc210x.c diff | blob | blame | history
Empty description
This page took 0.026125 seconds and 4 git commands to generate.