diff options
| author | Mark Cave-Ayland <mark.cave-ayland@ilande.co.uk> | 2021-04-07 20:57:58 +0100 |
|---|---|---|
| committer | Mark Cave-Ayland <mark.cave-ayland@ilande.co.uk> | 2021-04-12 22:35:53 +0100 |
| commit | 0ebb5fd80589835153a0c2baa1b8cc7a04e67a93 (patch) | |
| tree | 3aa508aa2e1a85588b25a5e81291ab4e6beaead2 /util/qemu-timer.c | |
| parent | fbc6510e3379fa8f8370bf71198f0ce733bf07f9 (diff) | |
| download | focaccia-qemu-0ebb5fd80589835153a0c2baa1b8cc7a04e67a93.tar.gz focaccia-qemu-0ebb5fd80589835153a0c2baa1b8cc7a04e67a93.zip | |
esp: don't overflow cmdfifo if TC is larger than the cmdfifo size
If a guest transfers the message out/command phase data using DMA with a TC that is larger than the cmdfifo size then the cmdfifo overflows triggering an assert. Limit the size of the transfer to the free space available in cmdfifo. Buglink: https://bugs.launchpad.net/qemu/+bug/1919036 Signed-off-by: Mark Cave-Ayland <mark.cave-ayland@ilande.co.uk> Reviewed-by: Philippe Mathieu-Daudé <f4bug@amsat.org> Tested-by: Alexander Bulekov <alxndr@bu.edu> Message-Id: <20210407195801.685-10-mark.cave-ayland@ilande.co.uk>
Diffstat (limited to 'util/qemu-timer.c')
0 files changed, 0 insertions, 0 deletions