[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Qemu-devel] [PATCH v1 1/1] sdhci.c: Limit the maximum block size
|
From: |
Stefan Hajnoczi |
|
Subject: |
Re: [Qemu-devel] [PATCH v1 1/1] sdhci.c: Limit the maximum block size |
|
Date: |
Thu, 8 Oct 2015 10:50:05 +0100 |
|
User-agent: |
Mutt/1.5.24 (2015-08-30) |
On Tue, Oct 06, 2015 at 10:40:41AM -0700, Alistair Francis wrote:
> It is possible for the guest to set an invalid block
> size which is larger then the fifo_buffer[] array. This
> could cause a buffer overflow.
>
> To avoid this limit the maximum size of the blksize variable.
>
> Signed-off-by: Alistair Francis <address@hidden>
> Suggested-by: Igor Mitsyanko <address@hidden>
> Reported-by: Intel Security ATR <address@hidden>
> Reviewed-by: Stefan Hajnoczi <address@hidden>
> ---
>
> hw/sd/sdhci.c | 10 ++++++++++
> 1 file changed, 10 insertions(+)
Thanks, applied to my block tree:
https://github.com/stefanha/qemu/commits/block
Stefan