mirrors/qemu
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
qemu/hw
History
Stefan Weil 913895ab96 hw/fmopl: Fix buffer access out-of-bounds errors 
Index 75 is one too large for AR_TABLE[75], DR_TABLE[75].
This error was reported by cppcheck.

hw/fmopl.c:600: error: Buffer access out-of-bounds: OPL.AR_TABLE
hw/fmopl.c:601: error: Buffer access out-of-bounds: OPL.DR_TABLE

Fix this by limiting the access to the allowed range.
MultiArcadeMachineEmulator has newer versions of fmopl,
but using these requires more efforts.

Cc: Blue Swirl <blauwirbel@gmail.com>
Reviewed-by: malc <av1474@comtv.ru>
Signed-off-by: Stefan Weil <weil@mail.berlios.de>
Signed-off-by: Blue Swirl <blauwirbel@gmail.com>
2011-03-13 13:35:21 +00:00
..
ide
isa-bus: Remove bogus IRQ sharing check
2011-02-21 15:46:53 +01:00
9p.h
…
a9mpcore.c
…
ac97.c
…
acpi_piix4.c
…
acpi.c
…
acpi.h
…
adb.c
…
adlib.c
…
ads7846.c
…
alpha_palcode.c
…
an5206.c
…
apb_pci.c
…
apb_pci.h
…
apic.c
correctly check ppr priority during interrupt injection]
2011-02-14 08:43:30 -06:00
apic.h
…
apm.c
…
apm.h
…
applesmc.c
…
arm11mpcore.c
…
arm_boot.c
target-arm: Integrate secondary CPU reset in arm_boot
2011-03-06 23:37:19 +01:00
arm_gic.c
target-arm: Fix soft interrupt in GIC distributor
2011-03-06 23:37:17 +01:00
arm_pic.c
…
arm_sysctl.c
hw/arm_sysctl.c: Wire MCI register MMC card status bits to GPIO inputs
2011-03-06 19:01:30 +01:00
arm_timer.c
…
arm-misc.h
…
armv7m_nvic.c
…
armv7m.c
…
audiodev.h
…
axis_dev88.c
…
baum.c
…
baum.h
…
bitbang_i2c.c
…
bitbang_i2c.h
…
blizzard_template.h
…
blizzard.c
…
boards.h
…
bonito.c
…
bt-hci-csr.c
…
bt-hci.c
…
bt-hid.c
…
bt-l2cap.c
…
bt-sdp.c
…
bt.c
…
bt.h
…
cbus.c
…
cdrom.c
…
cirrus_vga_rop2.h
…
cirrus_vga_rop.h
…
cirrus_vga.c
cirrus: Remove obsolete kvm.h include
2011-02-14 12:39:47 -02:00
cris_pic_cpu.c
…
cris-boot.c
…
cris-boot.h
…
cs4231.c
…
cs4231a.c
…
cuda.c
…
debugcon.c
…
dec_pci.c
…
dec_pci.h
…
device-hotplug.c
blockdev: Fix drive_add for drives without media
2011-01-31 11:59:24 +01:00
devices.h
…
dma.c
…
dp8393x.c
…
ds1225y.c
…
ds1338.c
…
dummy_m68k.c
…
e1000_hw.h
…
e1000.c
e1000: verify we have buffers, upfront
2011-02-20 15:18:26 +01:00
ecc.c
spitz: make sl-nand emulation use qdev infrastructure
2011-01-29 13:25:22 +01:00
eccmemctl.c
…
eepro100.c
…
eeprom93xx.c
…
eeprom93xx.h
…
elf_ops.h
…
empty_slot.c
…
empty_slot.h
…
es1370.c
…
escc.c
escc: fix interrupt flags
2011-01-29 15:07:19 +01:00
escc.h
…
esp.c
…
esp.h
…
etraxfs_dma.c
…
etraxfs_dma.h
…
etraxfs_eth.c
…
etraxfs_pic.c
…
etraxfs_ser.c
…
etraxfs_timer.c
etrax: Dont decrease the granularity of timers
2011-01-26 10:36:37 +01:00
etraxfs.c
…
etraxfs.h
…
event_notifier.c
…
event_notifier.h
…
fdc.c
fdc: refactor device creation
2011-02-20 09:33:46 +00:00
fdc.h
fdc: make optional
2011-02-20 09:34:06 +00:00
file-op-9p.h
…
firmware_abi.h
…
flash.h
spitz: make sl-nand emulation use qdev infrastructure
2011-01-29 13:25:22 +01:00
fmopl.c
hw/fmopl: Fix buffer access out-of-bounds errors
2011-03-13 13:35:21 +00:00
fmopl.h
…
framebuffer.c
…
framebuffer.h
…
fw_cfg.c
…
fw_cfg.h
…
g364fb.c
…
grackle_pci.c
vmstate: remove grackle_pci savevm code
2011-03-06 20:10:58 +01:00
grlib_apbuart.c
…
grlib_gptimer.c
…
grlib_irqmp.c
…
grlib.h
…
gt64xxx.c
gt64xxx: remove savevm support
2011-03-06 20:10:58 +01:00
gumstix.c
pxa2xx_gpio: switch to using qdev
2011-01-29 14:06:07 +01:00
gus.c
…
gusemu_hal.c
…
gusemu_mixer.c
…
gusemu.h
…
gustate.h
…
hda-audio.c
…
heathrow_pic.c
…
hpet_emul.h
…
hpet.c
isa-bus: Remove bogus IRQ sharing check
2011-02-21 15:46:53 +01:00
hw.h
vmstate: move timers to use test instead of version
2011-03-10 16:12:26 -06:00
i2c.c
…
i2c.h
max7310: finish qdev'ication
2011-02-11 23:31:17 +01:00
i8254.c
isa-bus: Remove bogus IRQ sharing check
2011-02-21 15:46:53 +01:00
i8259.c
…
ide.h
blockdev: Fix regression in -drive if=scsi,index=N
2011-01-31 10:42:42 +01:00
integratorcp.c
…
intel-hda-defs.h
…
intel-hda.c
…
intel-hda.h
…
ioapic.c
ioapic: Style & magics cleanup
2011-02-04 06:33:26 -06:00
ioapic.h
ioapic: Implement EOI handling for level-triggered IRQs
2011-02-04 06:33:26 -06:00
ioh3420.c
…
ioh3420.h
…
irq.c
hw/irq: Add qemu_irq_split() so one GPIO output can feed two inputs
2011-03-06 19:01:31 +01:00
irq.h
hw/irq: Add qemu_irq_split() so one GPIO output can feed two inputs
2011-03-06 19:01:31 +01:00
isa_mmio.c
…
isa-bus.c
isa-bus: Remove bogus IRQ sharing check
2011-02-21 15:46:53 +01:00
isa.h
isa-bus: Remove bogus IRQ sharing check
2011-02-21 15:46:53 +01:00
ivshmem.c
…
jazz_led.c
…
kvmclock.c
kvm: x86: Introduce kvmclock device to save/restore its state
2011-02-14 12:43:09 -02:00
kvmclock.h
kvm: x86: Introduce kvmclock device to save/restore its state
2011-02-14 12:43:09 -02:00
lan9118.c
…
lance.c
…
leon3.c
SPARC: Fix Leon3 cache control
2011-02-01 17:01:41 +00:00
lm32_boards.c
lm32: EVR32 and uclinux BSP
2011-03-07 13:42:37 +01:00
lm32_hwsetup.h
lm32: support for creating device tree
2011-03-07 13:42:37 +01:00
lm32_juart.c
lm32: juart model
2011-03-07 13:42:36 +01:00
lm32_juart.h
lm32: juart model
2011-03-07 13:42:36 +01:00
lm32_pic.c
lm32: interrupt controller model
2011-03-07 13:42:36 +01:00
lm32_pic.h
lm32: interrupt controller model
2011-03-07 13:42:36 +01:00
lm32_sys.c
lm32: system control model
2011-03-07 13:42:37 +01:00
lm32_timer.c
lm32: timer model
2011-03-07 13:42:36 +01:00
lm32_uart.c
lm32: uart model
2011-03-07 13:42:36 +01:00
lm32.h
lm32: pic and juart helper functions
2011-03-07 13:42:36 +01:00
lm832x.c
…
loader.c
…
loader.h
…
lsi53c895a.c
lsi53c895a: Update dnad when skipping MSGOUT bytes
2011-03-06 18:22:19 +01:00
m48t59.c
…
mac_dbdma.c
…
mac_dbdma.h
…
mac_nvram.c
…
macio.c
…
mainstone.c
mainstone: PCMCIA support
2011-03-10 03:38:13 +01:00
marvell_88w8618_audio.c
…
max111x.c
…
max7310.c
max7310: finish qdev'ication
2011-02-11 23:31:17 +01:00
mc146818rtc.c
mc146818rtc: update registers after a format change
2011-01-29 15:19:22 +01:00
mc146818rtc.h
…
mcf5206.c
…
mcf5208.c
…
mcf_fec.c
…
mcf_intc.c
…
mcf_uart.c
…
mcf.h
…
microblaze_pic_cpu.c
…
mips_addr.c
…
mips_cpudevs.h
…
mips_fulong2e.c
i8254: convert to qdev
2011-02-20 09:35:06 +00:00
mips_int.c
…
mips_jazz.c
i8254: convert to qdev
2011-02-20 09:35:06 +00:00
mips_malta.c
isa-bus: Remove bogus IRQ sharing check
2011-02-21 15:46:53 +01:00
mips_mipssim.c
…
mips_r4k.c
i8254: convert to qdev
2011-02-20 09:35:06 +00:00
mips_timer.c
…
mips-bios.h
…
mips.h
…
mipsnet.c
…
mpcore.c
…
msi.c
…
msi.h
…
msix.c
…
msix.h
…
msmouse.c
…
msmouse.h
…
mst_fpga.c
mainstone: PCMCIA support
2011-03-10 03:38:13 +01:00
multiboot.c
…
multiboot.h
…
musicpal.c
…
nand.c
…
ne2000-isa.c
ne2000_isa: refactor device creation
2011-02-20 09:32:26 +00:00
ne2000.c
…
ne2000.h
…
nseries.c
…
nvram.h
…
omap1.c
…
omap2.c
…
omap_clk.c
…
omap_dma.c
…
omap_dss.c
…
omap_gpio.c
…
omap_gpmc.c
…
omap_gptimer.c
…
omap_i2c.c
…
omap_intc.c
…
omap_l4.c
…
omap_lcd_template.h
…
omap_lcdc.c
…
omap_mmc.c
…
omap_sdrc.c
…
omap_spi.c
…
omap_sx1.c
…
omap_synctimer.c
…
omap_tap.c
…
omap_uart.c
…
omap.h
…
onenand.c
spitz: make sl-nand emulation use qdev infrastructure
2011-01-29 13:25:22 +01:00
openpic.c
…
openpic.h
…
palm.c
…
parallel.c
parallel: refactor device creation
2011-02-20 09:31:21 +00:00
pc_piix.c
isa-bus: Remove bogus IRQ sharing check
2011-02-21 15:46:53 +01:00
pc.c
pc: fix wrong CMOS values for floppy drives
2011-03-12 09:52:25 +00:00
pc.h
i8254: convert to qdev
2011-02-20 09:35:06 +00:00
pci_bridge.c
…
pci_bridge.h
…
pci_host.c
…
pci_host.h
…
pci_ids.h
…
pci_internals.h
…
pci_regs.h
…
pci-hotplug.c
blockdev: add refcount to DriveInfo
2011-02-07 12:51:19 +01:00
pci-stub.c
…
pci.c
pci: Fix memory leak
2011-02-20 18:23:00 +01:00
pci.h
pci: add creation functions that may fail
2011-02-12 08:27:58 +00:00
pcie_aer.c
vmstate: move VMSTATE_PCIE_AER_ERRS to hw/hw.h
2011-03-03 14:54:50 +01:00
pcie_aer.h
…
pcie_host.c
…
pcie_host.h
…
pcie_port.c
…
pcie_port.h
…
pcie_regs.h
…
pcie.c
…
pcie.h
…
pckbd.c
…
pcmcia.h
…
pcnet-pci.c
…
pcnet.c
moving eeprom initialization
2011-03-13 13:24:42 +00:00
pcnet.h
…
pcspk.c
i8254: convert to qdev
2011-02-20 09:35:06 +00:00
petalogix_s3adsp1800_mmu.c
microblaze: Fix PetaLogix company name
2011-03-11 15:24:37 +01:00
pflash_cfi01.c
…
pflash_cfi02.c
…
piix4.c
…
piix_pci.c
…
pixel_ops.h
…
pl011.c
…
pl022.c
…
pl031.c
…
pl050.c
…
pl061.c
hw/pl061.c: Implement ARM PL061 as well as Luminary one
2011-03-06 19:01:30 +01:00
pl080.c
…
pl110_template.h
…
pl110.c
…
pl181.c
hw/pl181: Implement GPIO output pins for card status
2011-03-06 19:01:29 +01:00
pl190.c
…
pm_smbus.c
…
pm_smbus.h
…
ppc4xx_devs.c
…
ppc4xx_pci.c
…
ppc4xx.h
…
ppc405_boards.c
ppc405: Fix memory leak
2011-02-20 18:23:07 +01:00
ppc405_uc.c
…
ppc405.h
…
ppc440_bamboo.c
…
ppc440.c
…
ppc440.h
…
ppc_mac.h
…
ppc_newworld.c
…
ppc_oldworld.c
…
ppc_prep.c
Revert "prep: Disable second IDE channel, as long as ISA IDE emulation doesn't support same irq for both channels"
2011-02-21 15:53:05 +01:00
ppc.c
…
ppc.h
…
ppce500_mpc8544ds.c
…
ppce500_pci.c
…
ppce500.h
…
prep_pci.c
…
prep_pci.h
…
primecell.h
hw/arm_sysctl.c: Wire MCI register MMC card status bits to GPIO inputs
2011-03-06 19:01:30 +01:00
ps2.c
PS/2 keyboard Scancode Set 3 support
2011-02-21 15:41:12 +01:00
ps2.h
…
ptimer.c
…
pxa2xx_dma.c
pxa2xx_dma: Get rid of a forward declaration.
2011-03-03 15:06:03 +01:00
pxa2xx_gpio.c
pxa2xx_pic: update to use qdev
2011-02-25 12:13:38 +01:00
pxa2xx_keypad.c
pxa2xx_keypad: Handle 0xe0xx keycodes
2011-02-20 19:53:23 +01:00
pxa2xx_lcd.c
…
pxa2xx_mmci.c
pxa2xx_dma: port to qdev/vmstate
2011-03-03 15:04:51 +01:00
pxa2xx_pcmcia.c
…
pxa2xx_pic.c
pxa2xx_pic: fixup initialisation
2011-03-10 03:11:47 +01:00
pxa2xx_template.h
…
pxa2xx_timer.c
pxa2xx_timer: Get rid of .level in PXA2xxTimer0.
2011-03-10 03:31:02 +01:00
pxa2xx.c
pxa2xx: port pxa2xx_rtc to using qdev/vmstate
2011-03-03 15:13:42 +01:00
pxa.h
pxa2xx: port pxa2xx_rtc to using qdev/vmstate
2011-03-03 15:13:42 +01:00
qdev-addr.c
…
qdev-addr.h
…
qdev-properties.c
qdev: Fix printout of bit device properties with bit index >= 8
2011-02-20 18:51:59 +01:00
qdev.c
qdev: add creation function that may fail
2011-02-12 08:27:55 +00:00
qdev.h
qdev: add creation function that may fail
2011-02-12 08:27:55 +00:00
qxl-logger.c
…
qxl-render.c
…
qxl.c
…
qxl.h
…
r2d.c
…
rc4030.c
…
realview_gic.c
…
realview.c
target-arm: Integrate secondary CPU reset in arm_boot
2011-03-06 23:37:19 +01:00
rtl8139.c
moving eeprom initialization
2011-03-13 13:24:42 +00:00
s390-virtio-bus.c
…
s390-virtio-bus.h
…
s390-virtio.c
s390: Fix memory leak
2011-02-20 18:23:07 +01:00
sb16.c
…
sbi.c
…
scsi-bus.c
…
scsi-defs.h
…
scsi-disk.c
Improve vm_stop reason declarations
2011-02-14 12:39:46 -02:00
scsi-generic.c
…
scsi.h
blockdev: Fix regression in -drive if=scsi,index=N
2011-01-31 10:42:42 +01:00
sd.c
hw/sd.c: fix sd_set_cb() crash when bdrv == NULL
2011-03-06 20:02:40 +01:00
sd.h
…
serial.c
serial: refactor device creation
2011-02-20 09:32:50 +00:00
sh7750_regnames.c
…
sh7750_regnames.h
…
sh7750_regs.h
…
sh7750.c
sh4: implement missing mmaped TLB read functions
2011-01-26 14:30:24 +01:00
sh_intc.c
…
sh_intc.h
…
sh_pci.c
…
sh_serial.c
…
sh_timer.c
…
sh.h
…
sharpsl.h
SharpSL scoop device - convert to qdev
2011-01-29 13:23:13 +01:00
shix.c
…
slavio_intctl.c
hw/slavio_intctl.c: fix gcc warning about array bounds overrun
2011-02-01 17:02:15 +00:00
slavio_misc.c
…
slavio_timer.c
…
sm501_template.h
…
sm501.c
…
smbios.c
…
smbios.h
…
smbus_eeprom.c
…
smbus.c
…
smbus.h
…
smc91c111.c
…
soc_dma.c
…
soc_dma.h
…
sparc32_dma.c
…
sparc32_dma.h
…
spitz.c
pxa2xx_gpio: switch to using qdev
2011-01-29 14:06:07 +01:00
ssd0303.c
…
ssd0323.c
…
ssi-sd.c
blockdev: New drive_get_next(), replacing qdev_init_bdrv()
2011-01-31 10:24:11 +01:00
ssi.c
…
ssi.h
…
stellaris_enet.c
…
stellaris_input.c
…
stellaris.c
hw/pl061.c: Implement ARM PL061 as well as Luminary one
2011-03-06 19:01:30 +01:00
sun4c_intctl.c
…
sun4m_iommu.c
…
sun4m.c
…
sun4m.h
…
sun4u.c
…
syborg_fb.c
…
syborg_interrupt.c
…
syborg_keyboard.c
…
syborg_pointer.c
…
syborg_rtc.c
…
syborg_serial.c
…
syborg_timer.c
…
syborg_virtio.c
…
syborg.c
…
syborg.h
…
sysbus.c
sysbus: add creation function that may fail
2011-02-12 09:45:03 +00:00
sysbus.h
sysbus: add creation function that may fail
2011-02-12 09:45:03 +00:00
tc6393xb_template.h
…
tc6393xb.c
Drop unnecessary inclusions of pxa.h header
2011-02-11 23:31:16 +01:00
tc58128.c
…
tcx.c
…
tmp105.c
…
tosa.c
tosa: we aren't connected to VBus, pass this info to Linux kernel
2011-02-11 23:31:16 +01:00
tsc210x.c
…
tsc2005.c
…
tusb6010.c
…
twl92230.c
…
unin_pci.c
vmstate: remove uninorth savevm code
2011-03-06 20:10:58 +01:00
usb-bt.c
…
usb-bus.c
…
usb-desc.c
…
usb-desc.h
…
usb-hid.c
…
usb-hub.c
…
usb-msd.c
Add bootindex handling into usb storage device.
2011-02-01 16:50:44 -06:00
usb-musb.c
…
usb-net.c
…
usb-ohci.c
…
usb-ohci.h
…
usb-serial.c
…
usb-uhci.c
…
usb-uhci.h
…
usb-wacom.c
…
usb.c
…
usb.h
…
versatile_pci.c
…
versatilepb.c
…
vga_int.h
vga-isa: convert to qdev
2011-02-20 09:34:31 +00:00
vga_template.h
…
vga-isa-mm.c
…
vga-isa.c
vga-isa: convert to qdev
2011-02-20 09:34:31 +00:00
vga-pci.c
…
vga.c
vga-isa: convert to qdev
2011-02-20 09:34:31 +00:00
vhost_net.c
vhost: force vhost off for non-MSI guests
2011-02-01 16:50:44 -06:00
vhost_net.h
vhost: force vhost off for non-MSI guests
2011-02-01 16:50:44 -06:00
vhost.c
Introduce log_start/log_stop in CPUPhysMemoryClient
2011-02-14 12:39:47 -02:00
vhost.h
vhost: force vhost off for non-MSI guests
2011-02-01 16:50:44 -06:00
virtex_ml507.c
…
virtio-9p-debug.c
…
virtio-9p-debug.h
…
virtio-9p-local.c
…
virtio-9p-posix-acl.c
…
virtio-9p-xattr-user.c
…
virtio-9p-xattr.c
…
virtio-9p-xattr.h
…
virtio-9p.c
…
virtio-9p.h
…
virtio-balloon.c
…
virtio-balloon.h
…
virtio-blk.c
Improve vm_stop reason declarations
2011-02-14 12:39:46 -02:00
virtio-blk.h
…
virtio-console.c
virtio-serial: kill VirtIOSerialDevice
2011-02-24 11:25:38 -06:00
virtio-net.c
virtio-net: Fix lduw_p() pointer argument of wrong size
2011-03-03 23:33:26 +01:00
virtio-net.h
…
virtio-pci.c
vhost: force vhost off for non-MSI guests
2011-02-01 16:50:44 -06:00
virtio-serial-bus.c
virtio-serial: kill VirtIOSerialDevice
2011-02-24 11:25:38 -06:00
virtio-serial.h
virtio-serial: kill VirtIOSerialDevice
2011-02-24 11:25:38 -06:00
virtio.c
…
virtio.h
vhost: force vhost off for non-MSI guests
2011-02-01 16:50:44 -06:00
vmmouse.c
vmmouse: fix queue_size field initialization
2011-02-12 17:44:11 +00:00
vmport.c
Fix vmport segfault (v2)
2011-02-17 19:34:52 +00:00
vmware_vga.c
vmware_vga: refactor device creation
2011-02-12 08:27:53 +00:00
vmware_vga.h
x86,MIPS: make vmware_vga optional
2011-02-12 08:28:22 +00:00
vt82c686.c
…
vt82c686.h
…
watchdog.c
Improve vm_stop reason declarations
2011-02-14 12:39:46 -02:00
watchdog.h
…
wdt_i6300esb.c
…
wdt_ib700.c
…
wm8750.c
…
xen_backend.c
…
xen_backend.h
…
xen_blkif.h
…
xen_common.h
…
xen_console.c
…
xen_devconfig.c
…
xen_disk.c
…
xen_domainbuild.c
…
xen_domainbuild.h
…
xen_machine_pv.c
…
xen_nic.c
…
xen.h
…
xenfb.c
…
xilinx_ethlite.c
xilinx-ethlite: Simplify byteswapping to/from brams
2011-03-10 09:16:52 +01:00
xilinx_intc.c
…
xilinx_timer.c
…
xilinx_uartlite.c
…
xilinx.h
…
xio3130_downstream.c
…
xio3130_downstream.h
…
xio3130_upstream.c
…
xio3130_upstream.h
…
zaurus.c
Drop unnecessary inclusions of pxa.h header
2011-02-11 23:31:16 +01:00