Michael S. Tsirkin 5193be3be3 tsc210x: fix buffer overrun on invalid state load ...

CVE-2013-4539

s->precision, nextprecision, function and nextfunction
come from wire and are used
as idx into resolution[] in TSC_CUT_RESOLUTION.

Validate after load to avoid buffer overrun.

Cc: Andreas Färber <afaerber@suse.de>
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Juan Quintela <quintela@redhat.com>

2014-05-05 22:15:02 +02:00

..

adb.c

…

hid.c

…

lm832x.c

lm832x: QOM'ify

2014-02-14 16:22:32 +01:00

Makefile.objs

…

milkymist-softusb.c

…

pckbd.c

pckbd: return 'keyboard enabled' on read input port command

2014-03-09 21:09:38 +02:00

pl050.c

…

ps2.c

…

pxa2xx_keypad.c

…

stellaris_input.c

…

tsc210x.c

tsc210x: fix buffer overrun on invalid state load

2014-05-05 22:15:02 +02:00

tsc2005.c

…

vmmouse.c

…