Mauro Matteo Cascella
b3af7fdf9c
hw/scsi/scsi-disk: MODE_PAGE_ALLS not allowed in MODE SELECT commands ...
This avoids an off-by-one read of 'mode_sense_valid' buffer in
hw/scsi/scsi-disk.c:mode_sense_page().
Fixes: CVE-2021-3930
Cc: qemu-stable@nongnu.org
Reported-by: Alexander Bulekov <alxndr@bu.edu>
Fixes: a8f4bbe2900 ("scsi-disk: store valid mode pages in a table")
Fixes : #546
Reported-by: Qiuhao Li <Qiuhao.Li@outlook.com>
Signed-off-by: Mauro Matteo Cascella <mcascell@redhat.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
2021-11-08 08:55:29 +01:00
2021-10-27 14:45:22 +02:00
2021-11-01 18:49:10 -04:00
2021-10-12 08:20:08 +02:00
2021-11-02 14:14:55 -04:00
2021-09-30 13:42:10 +01:00
2021-09-30 13:42:10 +01:00
2021-10-30 18:39:37 +02:00
2021-11-05 11:32:00 +08:00
2021-11-05 12:29:19 +01:00
2021-10-07 08:41:33 +10:00
2021-10-12 08:20:08 +02:00
2021-09-30 13:44:08 +01:00
2021-10-12 08:20:08 +02:00
2021-11-03 13:07:30 -04:00
2021-11-02 13:02:46 +01:00
2021-10-31 21:05:40 +01:00
2021-10-30 18:39:37 +02:00
2021-09-30 13:42:10 +01:00
2021-10-18 00:41:36 +02:00
2021-10-20 16:25:04 +02:00
2021-10-14 09:50:56 +02:00
2021-10-18 00:41:36 +02:00
2021-11-02 17:24:18 +01:00
2021-11-05 11:31:42 +08:00
2021-09-30 13:42:10 +01:00
2021-09-30 13:42:10 +01:00
2021-10-23 18:50:33 +02:00
2021-11-01 19:36:11 -04:00
2021-10-15 16:06:35 +02:00
2021-10-30 11:46:40 +02:00
2021-11-01 19:36:11 -04:00
2021-11-02 15:55:14 +00:00
2021-10-04 09:47:26 +02:00
2021-10-28 14:39:23 +10:00
2021-11-01 19:36:11 -04:00
2021-11-08 08:55:29 +01:00
2021-11-02 14:14:55 -04:00
2021-10-30 18:39:37 +02:00
2021-10-22 09:52:17 +02:00
2021-10-30 18:39:37 +02:00
2021-10-02 08:43:21 +02:00
2021-11-03 08:04:32 -04:00
2021-11-01 12:17:51 -06:00
2021-11-02 19:24:17 -04:00
2021-11-02 15:57:27 +01:00
2021-11-01 19:36:11 -04:00
b3af7fdf9c