Prasad J Pandit 97f4ed3b71 sd: limit 'req.cmd' while using as an array index ...

While processing standard SD commands, the 'req.cmd' value could
lead to OOB read when used as an index into 'sd_cmd_type' or
'sd_cmd_class' arrays. Limit 'req.cmd' value to avoid such an
access.

Reported-by: Qinghao Tang <luodalongde@gmail.com>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Reviewed-by: Peter Maydell <peter.maydell@linaro.org>
Message-id: 1453315857-1352-1-git-send-email-ppandit@redhat.com
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>

2016-02-11 11:17:32 +00:00

..

Makefile.objs

hw: move SD/MMC devices to hw/sd/, configure with default-configs/

2013-04-08 18:13:14 +02:00

milkymist-memcard.c

lm32: Clean up includes

2016-01-29 15:07:22 +00:00

omap_mmc.c

arm devices: Clean up includes

2016-01-29 15:07:25 +00:00

pl181.c

arm: Clean up includes

2016-01-29 15:07:23 +00:00

pxa2xx_mmci.c

arm: Clean up includes

2016-01-29 15:07:23 +00:00

sd.c

sd: limit 'req.cmd' while using as an array index

2016-02-11 11:17:32 +00:00

sdhci-internal.h

sdhci: Split sdhci.h for public and internal device usage

2015-10-29 17:59:27 +00:00

sdhci.c

hw: Clean up includes

2016-01-29 15:07:25 +00:00

ssi-sd.c

hw: Clean up includes

2016-01-29 15:07:25 +00:00