mirrors/qemu
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
d0c5f64338
qemu/hw/block
History
Li Hangjing 725fe5d10d virtio-blk: fix out-of-bounds access to bitmap in notify_guest_bh 
When the number of a virtio-blk device's virtqueues is larger than
BITS_PER_LONG, the out-of-bounds access to bitmap[ ] will occur.

Fixes: e21737ab15 ("virtio-blk: multiqueue batch notify")
Cc: qemu-stable@nongnu.org
Cc: Stefan Hajnoczi <stefanha@redhat.com>
Signed-off-by: Li Hangjing <lihangjing@baidu.com>
Reviewed-by: Xie Yongji <xieyongji@baidu.com>
Reviewed-by: Chai Wen <chaiwen@baidu.com>
Message-id: 20191216023050.48620-1-lihangjing@baidu.com
Message-Id: <20191216023050.48620-1-lihangjing@baidu.com>
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
2019-12-19 16:20:25 +00:00
..
dataplane virtio-blk: fix out-of-bounds access to bitmap in notify_guest_bh 2019-12-19 16:20:25 +00:00
block.c pflash: Require backend size to match device, improve errors 2019-03-26 08:16:24 +01:00
cdrom.c Include qemu-common.h exactly where needed 2019-06-12 13:20:20 +02:00
ecc.c Include hw/hw.h exactly where needed 2019-08-16 13:31:52 +02:00
fdc.c Include hw/qdev-properties.h less 2019-08-16 13:31:53 +02:00
hd-geometry.c block: Remove blk_pread_unthrottled() 2019-08-16 10:25:16 +02:00
Kconfig hw/m68k: add a dummy SWIM floppy controller 2019-10-28 19:06:51 +01:00
m25p80.c m25p80: Add support for w25q512jv 2019-10-15 18:09:05 +01:00
Makefile.objs hw/m68k: add a dummy SWIM floppy controller 2019-10-28 19:06:51 +01:00
nand.c Include hw/qdev-properties.h less 2019-08-16 13:31:53 +02:00
nvme.c Include hw/qdev-properties.h less 2019-08-16 13:31:53 +02:00
nvme.h nvme: add Get/Set Feature Timestamp support 2019-06-04 15:22:09 +02:00
onenand.c Include hw/qdev-properties.h less 2019-08-16 13:31:53 +02:00
pflash_cfi01.c hw/block/pflash: Remove dynamic field width from trace events 2019-11-19 14:45:58 +01:00
pflash_cfi02.c hw/block/pflash: Remove dynamic field width from trace events 2019-11-19 14:45:58 +01:00
swim.c hw/m68k: add a dummy SWIM floppy controller 2019-10-28 19:06:51 +01:00
tc58128.c Include hw/hw.h exactly where needed 2019-08-16 13:31:52 +02:00
trace-events hw/block/pflash: Remove dynamic field width from trace events 2019-11-19 14:45:58 +01:00
vhost-user-blk.c vhost-user-blk: prevent using uninitialized vqs 2019-09-16 06:27:35 -04:00
virtio-blk.c virtio-blk: advertise F_WCE (F_FLUSH) if F_CONFIG_WCE is advertised 2019-12-13 11:22:06 +00:00
xen_blkif.h xen: Import other xen/io/*.h 2019-06-24 10:42:30 +01:00
xen-block.c xen-block: treat XenbusStateUnknown the same as XenbusStateClosed 2019-09-24 12:21:11 +01:00