]> xenbits.xensource.com Git - qemu-xen.git/commit
projects / qemu-xen.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ec96320) | patch
usb: check page select value while processing iTD
authorPrasad J Pandit <pjp@fedoraproject.org>
Tue, 19 Jan 2016 19:56:46 +0000 (01:26 +0530)
committerStefano Stabellini <stefano.stabellini@eu.citrix.com>
Fri, 5 Feb 2016 12:05:53 +0000 (12:05 +0000)
commite6927b717db724746f8df98d5e7dad2d4f63d9a6
treeebdbdbe958c60370206b931e60b900d805609a22tree
parentec963204db85b8e7c5758c76a9ec7d21eb256925commit | diff
usb: check page select value while processing iTD

While processing isochronous transfer descriptors(iTD), the page
select(PG) field value could lead to an OOB read access. Add
check to avoid it.

Reported-by: Qinghao Tang <luodalongde@gmail.com>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Message-id: 1453233406-12165-1-git-send-email-ppandit@redhat.com
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
hw/usb/hcd-ehci.c diff | blob | blame | history
qemu-xen (upstream qemu) tree.