diff options
| author | Michael S. Tsirkin <mst@redhat.com> | 2021-12-21 09:45:44 -0500 |
|---|---|---|
| committer | Michael S. Tsirkin <mst@redhat.com> | 2022-01-06 06:11:38 -0500 |
| commit | 9bd6565ccee68f72d5012e24646e12a1c662827e (patch) | |
| tree | d4759ce3d001818e49cfe7adf0d22c220fa28d69 /hw/display/vhost-user-gpu.c | |
| parent | 7656d9ce09cb1d6d76eeb2081f164a920361d1d3 (diff) | |
| download | focaccia-qemu-9bd6565ccee68f72d5012e24646e12a1c662827e.tar.gz focaccia-qemu-9bd6565ccee68f72d5012e24646e12a1c662827e.zip | |
acpi: validate hotplug selector on access
When bus is looked up on a pci write, we didn't
validate that the lookup succeeded.
Fuzzers thus can trigger QEMU crash by dereferencing the NULL
bus pointer.
Fixes: b32bd763a1 ("pci: introduce acpi-index property for PCI device")
Fixes: CVE-2021-4158
Cc: "Igor Mammedov" <imammedo@redhat.com>
Fixes: https://gitlab.com/qemu-project/qemu/-/issues/770
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Reviewed-by: Philippe Mathieu-Daudé <philmd@redhat.com>
Reviewed-by: Ani Sinha <ani@anisinha.ca>
Diffstat (limited to 'hw/display/vhost-user-gpu.c')
0 files changed, 0 insertions, 0 deletions