]> xenbits.xensource.com Git - qemu-upstream-4.4-testing.git/commit
usb: check page select value while processing iTD
authorPrasad J Pandit <pjp@fedoraproject.org>
Tue, 19 Jan 2016 19:56:46 +0000 (01:26 +0530)
committerStefano Stabellini <stefano.stabellini@eu.citrix.com>
Fri, 5 Feb 2016 14:53:53 +0000 (14:53 +0000)
commitd08f9e6bfc8d15d1ac6377e4cfe48e1f4ef4d932
treea94cc64c447c38f022195b057f838f35dc27c050
parenta37e0e9de748f58b793a83e5d680f474c640f87e
usb: check page select value while processing iTD

While processing isochronous transfer descriptors(iTD), the page
select(PG) field value could lead to an OOB read access. Add
check to avoid it.

Reported-by: Qinghao Tang <luodalongde@gmail.com>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Message-id: 1453233406-12165-1-git-send-email-ppandit@redhat.com
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
hw/usb/hcd-ehci.c