mirrors/qemu
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
qemu/hw
History
Akihiko Odaki dd32b5ea7e hw/net/net_tx_pkt: Check the payload length 
Check the payload length if checksumming to ensure the payload contains
the space for the resulting value.

This bug was found by Alexander Bulekov with the fuzzer:
https://patchew.org/QEMU/20230129053316.1071513-1-alxndr@bu.edu/

The fixed test case is:
fuzz/crash_6aeaa33e7211ecd603726c53e834df4c6d1e08bc

Fixes: e263cd49c7 ("Packet abstraction for VMWARE network devices")
Signed-off-by: Akihiko Odaki <akihiko.odaki@daynix.com>
Signed-off-by: Jason Wang <jasowang@redhat.com>
2023-03-10 15:35:38 +08:00
..
9pfs
hw/xen: Build PV backend drivers for CONFIG_XEN_BUS
2023-03-07 17:04:30 +00:00
acpi
…
adc
…
alpha
…
arm
aspeed queue:
2023-03-09 10:23:05 +00:00
audio
hw/audio/via-ac97: Basic implementation of audio playback
2023-03-08 00:37:48 +01:00
avr
…
block
Enable PV backends with Xen/KVM emulation
2023-03-09 13:22:05 +00:00
char
hw/xen: Build PV backend drivers for CONFIG_XEN_BUS
2023-03-07 17:04:30 +00:00
core
hw: arm: Support direct boot for Linux/arm64 EFI zboot images
2023-03-06 14:08:12 +00:00
cpu
…
cris
…
cxl
hw/cxl/mailbox: Use new UUID network order define for cel_uuid
2023-03-02 19:13:52 -05:00
display
Enable PV backends with Xen/KVM emulation
2023-03-09 13:22:05 +00:00
dma
hw/isa: Rename isa_get_dma() -> isa_bus_get_dma()
2023-02-27 22:29:02 +01:00
gpio
…
hppa
hw/isa: Rename isa_bus_irqs() -> isa_bus_register_input_irqs()
2023-02-27 22:29:02 +01:00
hyperv
…
i2c
hw: allwinner-i2c: Fix TWI_CNTR_INT_FLAG on SUN6i SoCs
2023-03-06 14:08:12 +00:00
i386
i386/xen: Initialize Xen backends from pc_basic_device_init() for emulation
2023-03-07 17:04:30 +00:00
ide
hw/ide/via: Replace magic 2 value by ARRAY_SIZE / MAX_IDE_DEVS
2023-02-27 22:29:02 +01:00
input
…
intc
hw/intc/i8259: Implement legacy LTIM Edge/Level Bank Select
2023-03-08 00:37:48 +01:00
ipack
…
ipmi
…
isa
hw/audio/via-ac97: Basic implementation of audio playback
2023-03-08 00:37:48 +01:00
loongarch
hw/loongarch/virt: add system_powerdown hmp command support
2023-03-03 09:37:30 +08:00
m68k
…
mem
hw/cxl: set cxl-type3 device type to PCI_CLASS_MEMORY_CXL
2023-03-02 19:13:52 -05:00
microblaze
…
mips
hw/mips/itu: Pass SAAR using QOM link property
2023-03-08 00:37:48 +01:00
misc
MIPS (and few misc) patches
2023-03-09 10:22:50 +00:00
net
hw/net/net_tx_pkt: Check the payload length
2023-03-10 15:35:38 +08:00
nios2
…
nubus
…
nvme
hw/nvme: flexible data placement emulation
2023-03-06 15:28:02 +01:00
nvram
aspeed queue:
2023-03-03 17:11:22 +00:00
openrisc
…
pci
virtio,pc,pci: features, cleanups, fixes
2023-03-03 13:35:54 +00:00
pci-bridge
hw/pci-bridge/cxl_downstream: Fix type naming mismatch
2023-03-02 19:13:52 -05:00
pci-host
hw/ppc/pegasos2: Fix PCI interrupt routing
2023-03-08 00:37:48 +01:00
pcmcia
…
ppc
gdbstub refactor:
2023-03-09 16:54:51 +00:00
rdma
…
remote
…
riscv
hw/riscv/virt.c: Initialize the ACPI tables
2023-03-06 11:35:07 -08:00
rtc
hw/rtc: Rename rtc_[get|set]_memory -> mc146818rtc_[get|set]_cmos_data
2023-02-27 22:29:02 +01:00
rx
…
s390x
s390x/pv: Add support for asynchronous teardown for reboot
2023-02-27 09:15:39 +01:00
scsi
…
sd
…
sensor
…
sh4
hw/ide/mmio: Extract TYPE_MMIO_IDE declarations to 'hw/ide/mmio.h'
2023-02-27 22:29:02 +01:00
smbios
hw/smbios: fix field corruption in type 4 table
2023-03-02 03:10:46 -05:00
sparc
…
sparc64
hw/ide: Un-inline ide_set_irq()
2023-02-27 22:29:02 +01:00
ssi
aspeed/smc: Replace SysBus IRQs with GPIO lines
2023-03-02 13:57:50 +01:00
timer
hw/timer/hpet: Fix expiration time overflow
2023-03-02 03:10:47 -05:00
tpm
…
tricore
…
usb
Enable PV backends with Xen/KVM emulation
2023-03-09 13:22:05 +00:00
vfio
vfio: Fix vfio_get_dev_region() trace event
2023-03-07 11:19:07 -07:00
virtio
vhost: avoid a potential use of an uninitialized variable in vhost_svq_poll()
2023-03-02 19:13:51 -05:00
watchdog
…
xen
hw/xen: Avoid crash when backend watch fires too early
2023-03-07 17:04:30 +00:00
xenpv
hw/xen: Subsume xen_be_register_common() into xen_be_init()
2023-03-01 09:09:22 +00:00
xtensa
…
Kconfig
xen: add CONFIG_XEN_BUS and CONFIG_XEN_EMU options for Xen emulation
2023-03-01 08:22:49 +00:00
meson.build
…