summary refs log tree commit diff stats
path: root/scripts/switch-timer-api
diff options
context:
space:
mode:
authorGerd Hoffmann <kraxel@redhat.com>2015-12-14 09:21:23 +0100
committerGerd Hoffmann <kraxel@redhat.com>2015-12-15 09:49:03 +0100
commit156a2e4dbffa85997636a7a39ef12da6f1b40254 (patch)
treec7d18840cfc024eb520ad6032ad49a48b1b5bc4b /scripts/switch-timer-api
parent93d592e3d1a45e4c0b3969e1fbbc459d6df826aa (diff)
downloadfocaccia-qemu-156a2e4dbffa85997636a7a39ef12da6f1b40254.tar.gz
focaccia-qemu-156a2e4dbffa85997636a7a39ef12da6f1b40254.zip
ehci: make idt processing more robust
Make ehci_process_itd return an error in case we didn't do any actual
iso transfer because we've found no active transaction.  That'll avoid
ehci happily run in circles forever if the guest builds a loop out of
idts.

This is CVE-2015-8558.

Cc: qemu-stable@nongnu.org
Reported-by: Qinghao Tang <luodalongde@gmail.com>
Tested-by: P J P <ppandit@redhat.com>
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Diffstat (limited to 'scripts/switch-timer-api')
0 files changed, 0 insertions, 0 deletions