mirrors/qemu
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
0d34fbabc1
qemu/hw/audio
History
Prasad J Pandit 0c0fc2b5fd audio: intel-hda: check stream entry count during transfer 
Intel HDA emulator uses stream of buffers during DMA data
transfers. Each entry has buffer length and buffer pointer
position, which are used to derive bytes to 'copy'. If this
length and buffer pointer were to be same, 'copy' could be
set to zero(0), leading to an infinite loop. Add check to
avoid it.

Reported-by: Huawei PSIRT <psirt@huawei.com>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Reviewed-by: Stefan Hajnoczi <stefanha@redhat.com>
Message-id: 1476949224-6865-1-git-send-email-ppandit@redhat.com
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
2016-10-26 14:51:44 +02:00
..
ac97.c audio: Clean up includes 2016-02-02 13:57:31 +01:00
adlib.c Replaced get_tick_per_sec() by NANOSECONDS_PER_SECOND 2016-03-22 22:20:17 +01:00
cs4231.c hw/audio: QOM'ify cs4231.c 2016-06-03 11:13:38 +02:00
cs4231a.c cs4231a: use IsaDma interface instead of global DMA_* functions 2016-02-03 11:28:58 -05:00
es1370.c ES1370: QOMify 2016-02-11 15:15:46 +03:00
fmopl.c audio: Clean up includes 2016-02-02 13:57:31 +01:00
fmopl.h Clean up ill-advised or unusual header guards 2016-07-12 16:20:46 +02:00
gus.c portio: keep references on portio 2016-09-08 18:05:21 +04:00
gusemu_hal.c audio: Clean up includes 2016-02-02 13:57:31 +01:00
gusemu_mixer.c audio: Clean up includes 2016-02-02 13:57:31 +01:00
gusemu.h Clean up decorations and whitespace around header guards 2016-07-12 16:20:46 +02:00
gustate.h Clean up decorations and whitespace around header guards 2016-07-12 16:20:46 +02:00
hda-codec-common.h hda-codec: make mixemu selectable at runtime 2013-09-24 10:29:34 +02:00
hda-codec.c audio: Clean up includes 2016-02-02 13:57:31 +01:00
intel-hda-defs.h hw: move private headers to hw/ subdirectories. 2013-04-08 18:13:16 +02:00
intel-hda.c audio: intel-hda: check stream entry count during transfer 2016-10-26 14:51:44 +02:00
intel-hda.h intel-hda: Pass size to hda_codec_bus_init() 2013-08-30 20:14:38 +02:00
lm4549.c audio: Clean up includes 2016-02-02 13:57:31 +01:00
lm4549.h Clean up decorations and whitespace around header guards 2016-07-12 16:20:46 +02:00
Makefile.objs audio: replace audio card configuration with default-configs 2013-04-29 12:16:37 -05:00
marvell_88w8618.c audio: Clean up includes 2016-02-02 13:57:31 +01:00
milkymist-ac97.c milkymist: update specification URLs 2016-06-20 18:12:04 +02:00
pcspk.c pcspk: adding vmstate for save/restore 2016-09-15 15:10:06 +02:00
pl041.c hw: explicitly include qemu/log.h 2016-05-19 16:42:29 +02:00
pl041.h Clean up decorations and whitespace around header guards 2016-07-12 16:20:46 +02:00
pl041.hx hw: move target-independent files to subdirectories 2013-04-08 18:13:12 +02:00
sb16.c portio: keep references on portio 2016-09-08 18:05:21 +04:00
trace-events trace-events: fix first line comment in trace-events 2016-08-12 10:36:01 +01:00
wm8750.c audio: Clean up includes 2016-02-02 13:57:31 +01:00