Philippe Mathieu-Daudé fc2e706f4c hw/sd/sdhci: Reset @data_count index on invalid ADMA transfers ... We neglected to clear the @data_count index on ADMA error, allowing to trigger assertion in sdhci_read_dataport() or sdhci_write_dataport(). Cc: qemu-stable@nongnu.org Fixes: d7dfca0807 ("hw/sdhci: introduce standard SD host controller") Reported-by: Zheyu Ma <zheyuma97@gmail.com> Resolves: https://gitlab.com/qemu-project/qemu/-/issues/2455 Signed-off-by: Philippe Mathieu-Daudé <philmd@linaro.org> Reviewed-by: Richard Henderson <richard.henderson@linaro.org> Message-Id: <20240730092138.32443-4-philmd@linaro.org> (cherry picked from commit ed5a159c3d) Signed-off-by: Michael Tokarev <mjt@tls.msk.ru>		2024-08-11 10:43:25 +03:00
..
9pfs	hw: replace most qemu_bh_new calls with qemu_bh_new_guarded	2023-09-11 10:53:50 +03:00
acpi	hmat acpi: Fix out of bounds access due to missing use of indirection	2024-03-14 21:24:34 +03:00
adc
alpha	hw: Remove unused MAX_IDE_BUS define	2022-10-31 11:32:07 +01:00
arm	hw/arm/mps2-tz.c: fix RX/TX interrupts order	2024-08-02 10:37:43 +03:00
audio	hw/audio/hda-codec: fix multiplication overflow	2023-12-20 19:11:10 +03:00
avr
block	hw/block/nand: Fix out-of-bound access in NAND block buffer	2024-04-10 19:36:00 +03:00
char	hw/char/bcm2835_aux: Fix assert when receive FIFO fills up	2024-08-02 09:37:28 +03:00
core	hw/nvme: add machine compatibility parameter to enable msix exclusive bar	2024-03-14 21:24:34 +03:00
cpu
cris
cxl	hw/cxl/cxl-host: Fix segmentation fault when getting cxl-fmw property	2024-07-24 07:31:14 +03:00
display	stdvga: fix screen blanking	2024-06-20 10:04:40 +03:00
dma	hw/dmax/xlnx_dpdma: fix handling of address_extension descriptor fields	2024-05-02 13:16:29 +03:00
gpio	hw/gpio/meson: Introduce dedicated config switch for hw/gpio/mpc8xxx	2022-10-17 16:15:09 -03:00
hppa	target/hppa: Provide qemu version via fw_cfg to firmware	2023-06-26 19:35:29 +03:00
hyperv	hw/hyperv/hyperv.c: Use device_cold_reset() instead of device_legacy_reset()	2022-10-27 10:27:23 +01:00
i2c	hw/i2c/aspeed: Fix TXBUF transmission start position error	2023-09-11 10:53:51 +03:00
i386	hw/i386/amd_iommu: Don't leak memory in amdvi_update_iotlb()	2024-08-02 10:35:37 +03:00
ide	hw/ide/ahci: fix legacy software reset	2023-11-22 14:25:06 +03:00
input	lasips2: LASI PS/2 devices are not user-createable	2023-10-21 14:05:14 +03:00
intc	hw/intc/loongson_ipi: Access memory in little endian	2024-07-24 13:17:41 +03:00
ipack
ipmi
isa	acpi: x86: move RPQx field back to _SB scope	2022-11-22 05:19:00 -05:00
loongarch	Revert "hw/loongarch/virt: Add cfi01 pflash device"	2022-12-05 11:24:35 -05:00
m68k	m68k/q800: do not re-randomize RNG seed on snapshot load	2022-10-27 11:34:31 +01:00
mem	hw/mem/cxl-type3: Add CXL CDAT Data Object Exchange	2022-11-07 13:12:19 -05:00
microblaze
mips	hw/mips/malta: Fix the malta machine on big endian hosts	2023-12-20 19:11:10 +03:00
misc	hw/misc/bcm2835_property: Fix handling of FRAMEBUFFER_SET_PALETTE	2024-08-02 10:19:03 +03:00
net	virtio-net: Fix network stall at the host side waiting for kick	2024-08-06 17:18:25 +03:00
nios2	hw/nios2: set machine->fdt in nios2_load_dtb()	2022-10-17 16:15:10 -03:00
nubus
nvme	hw/nvme: fix memory leak in nvme_dsm	2024-07-23 21:00:31 +03:00
nvram	hw/nvram/xlnx-efuse-ctrl: Free XlnxVersalEFuseCtrl[] "pg0-lock" array	2023-12-20 19:11:10 +03:00
openrisc	openrisc: re-randomize rng-seed on reboot	2022-10-27 11:34:31 +01:00
pci	pcie_sriov: Validate NumVFs	2024-03-14 21:24:34 +03:00
pci-bridge	hw/pci-bridge/cxl-upstream: Add a CDAT table access DOE	2022-11-07 13:12:19 -05:00
pci-host	pci-host: designware: Limit value range of iATU viewport register	2024-02-03 16:45:54 +03:00
pcmcia
ppc	ppc/spapr: Initialize max_cpus limit to SPAPR_IRQ_NR_IPIS.	2024-04-16 21:16:12 +03:00
rdma	hw/pvrdma: Protect against buggy or malicious guest driver	2023-10-21 14:05:14 +03:00
remote	hw/remote/vfio-user: Fix config space access byte order	2024-05-10 13:20:20 +03:00
riscv	hw/riscv: virt: Fix riscv,pmu DT node path	2023-09-13 12:21:22 +03:00
rtc	hw/rtc/sun4v-rtc: Relicense to GPLv2-or-later	2024-03-13 23:09:00 +03:00
rx	rx: re-randomize rng-seed on reboot	2022-10-27 11:34:31 +01:00
s390x	s390x/ap: fix missing subsystem reset registration	2023-09-13 21:57:05 +03:00
scsi	hw/scsi/scsi-generic: Fix io_timeout property not applying	2024-04-09 20:09:20 +03:00
sd	hw/sd/sdhci: Reset @data_count index on invalid ADMA transfers	2024-08-11 10:43:25 +03:00
sensor
sh4
smbios	hw/smbios: Fix port connector option validation	2024-02-13 21:06:28 +03:00
sparc
sparc64	hw: Remove unused MAX_IDE_BUS define	2022-10-31 11:32:07 +01:00
ssi	aspeed/smc: Cache AspeedSMCClass	2022-10-24 11:20:15 +02:00
timer	hw/timer/nrf51_timer: Don't lose time when timer is queried in tight loop	2023-06-22 10:38:38 +03:00
tpm	hw/tpm: TIS on sysbus: Remove unsupport ppi command line option	2023-09-13 12:21:22 +03:00
tricore
usb	hw/usb/bus.c: PCAP adding 0xA in Windows version	2024-03-01 18:59:25 +03:00
vfio	vfio/pci: Disable INTx in vfio_realize error path	2023-08-05 08:39:54 +03:00
virtio	virtio-net: Fix network stall at the host side waiting for kick	2024-08-06 17:18:25 +03:00
watchdog
xen	xen/pt: reserve PCI slot 2 for Intel igd-passthru	2023-05-18 21:09:59 +03:00
xenpv
xtensa
Kconfig
meson.build