diff options
| author | Gerd Hoffmann <kraxel@redhat.com> | 2016-05-30 09:09:20 +0200 |
|---|---|---|
| committer | Gerd Hoffmann <kraxel@redhat.com> | 2016-06-06 09:04:24 +0200 |
| commit | 7e486f7577764a07aa35588e119903c80a5c30a2 (patch) | |
| tree | f7e294f10087d43fdc2bf94fb15ada823a483ed1 /hw/i2c | |
| parent | c2e3c54d3960bc53bfa3a5ce7ea7a050b9be267e (diff) | |
| download | focaccia-qemu-7e486f7577764a07aa35588e119903c80a5c30a2.tar.gz focaccia-qemu-7e486f7577764a07aa35588e119903c80a5c30a2.zip | |
vmsvga: shadow fifo registers
The fifo is normal ram. So kvm vcpu threads and qemu iothread can access the fifo in parallel without syncronization. Which in turn implies we can't use the fifo pointers in-place because the guest can try changing them underneath us. So add shadows for them, to make sure the guest can't modify them after we've applied sanity checks. Fixes: CVE-2016-4454 Cc: qemu-stable@nongnu.org Cc: P J P <ppandit@redhat.com> Signed-off-by: Gerd Hoffmann <kraxel@redhat.com> Message-id: 1464592161-18348-4-git-send-email-kraxel@redhat.com
Diffstat (limited to 'hw/i2c')
0 files changed, 0 insertions, 0 deletions