diff options
| author | Gerd Hoffmann <kraxel@redhat.com> | 2015-12-14 09:21:23 +0100 |
|---|---|---|
| committer | Gerd Hoffmann <kraxel@redhat.com> | 2015-12-15 09:49:03 +0100 |
| commit | 156a2e4dbffa85997636a7a39ef12da6f1b40254 (patch) | |
| tree | c7d18840cfc024eb520ad6032ad49a48b1b5bc4b /ui/sdl.c | |
| parent | 93d592e3d1a45e4c0b3969e1fbbc459d6df826aa (diff) | |
| download | focaccia-qemu-156a2e4dbffa85997636a7a39ef12da6f1b40254.tar.gz focaccia-qemu-156a2e4dbffa85997636a7a39ef12da6f1b40254.zip | |
ehci: make idt processing more robust
Make ehci_process_itd return an error in case we didn't do any actual iso transfer because we've found no active transaction. That'll avoid ehci happily run in circles forever if the guest builds a loop out of idts. This is CVE-2015-8558. Cc: qemu-stable@nongnu.org Reported-by: Qinghao Tang <luodalongde@gmail.com> Tested-by: P J P <ppandit@redhat.com> Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Diffstat (limited to 'ui/sdl.c')
0 files changed, 0 insertions, 0 deletions