summary refs log tree commit diff stats
path: root/results/scraper/launchpad-without-comments/1581308
blob: 55893db4088e3b74c6b46385989de8afb0aec43d (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
ohci doesn't check the 'num-ports' property

command:
qemu-system-x86_64 -m 1024 -enable-kvm /root/centos6.img -enable-kvm -device pci-ohci,num-ports=100,masterbus=1

The ohci doesn't check the 'num-ports' property and would case an out-of-bands write,crash the qemu process.

    ohci->num_ports = num_ports;
    if (masterbus) {
        USBPort *ports[OHCI_MAX_PORTS];
        for(i = 0; i < num_ports; i++) {
            ports[i] = &ohci->rhport[i].port;
        }

The version of qemu is 2.6.0 release from 
http://wiki.qemu-project.org/download/qemu-2.6.0.tar.bz2