[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Qemu-devel] [PULL for v2.9 07/10] dma: rc4030: limit interval timer rel
From: |
Yongbok Kim |
Subject: |
[Qemu-devel] [PULL for v2.9 07/10] dma: rc4030: limit interval timer reload value |
Date: |
Mon, 20 Mar 2017 13:00:23 +0000 |
From: Prasad J Pandit <address@hidden>
The JAZZ RC4030 chipset emulator has a periodic timer and
associated interval reload register. The reload value is used
as divider when computing timer's next tick value. If reload
value is large, it could lead to divide by zero error. Limit
the interval reload value to avoid it.
Reported-by: Huawei PSIRT <address@hidden>
Signed-off-by: Prasad J Pandit <address@hidden>
Tested-by: Hervé Poussineau <address@hidden>
Signed-off-by: Yongbok Kim <address@hidden>
---
hw/dma/rc4030.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/hw/dma/rc4030.c b/hw/dma/rc4030.c
index 17c8518..41fc043 100644
--- a/hw/dma/rc4030.c
+++ b/hw/dma/rc4030.c
@@ -460,7 +460,7 @@ static void rc4030_write(void *opaque, hwaddr addr,
uint64_t data,
break;
/* Interval timer reload */
case 0x0228:
- s->itr = val;
+ s->itr = val & 0x01FF;
qemu_irq_lower(s->timer_irq);
set_next_tick(s);
break;
--
2.7.4
- [Qemu-devel] [PULL for v2.9 00/10] target-mips queue, Yongbok Kim, 2017/03/20
- [Qemu-devel] [PULL for v2.9 07/10] dma: rc4030: limit interval timer reload value,
Yongbok Kim <=
- [Qemu-devel] [PULL for v2.9 10/10] MAINTAINERS: update for MIPS devices, Yongbok Kim, 2017/03/20
- [Qemu-devel] [PULL for v2.9 02/10] target-mips: remove old & unuseful comments, Yongbok Kim, 2017/03/20
- [Qemu-devel] [PULL for v2.9 01/10] target-mips: fix compiler warnings (clang 5), Yongbok Kim, 2017/03/20
- [Qemu-devel] [PULL for v2.9 04/10] target-mips: replace break by goto cp0_unimplemented, Yongbok Kim, 2017/03/20
- [Qemu-devel] [PULL for v2.9 08/10] dma/rc4030: translate memory accesses only when they occur, Yongbok Kim, 2017/03/20
- [Qemu-devel] [PULL for v2.9 03/10] target-mips: log bad coprocessor0 register accesses with LOG_UNIMP, Yongbok Kim, 2017/03/20
- [Qemu-devel] [PULL for v2.9 05/10] target-mips: replace few LOG_DISAS() with trace points, Yongbok Kim, 2017/03/20
- [Qemu-devel] [PULL for v2.9 09/10] dma/rc4030: fix a mixed declarations and code warning, Yongbok Kim, 2017/03/20
- [Qemu-devel] [PULL for v2.9 06/10] target/mips: fix delay slot detection in gen_msa_branch(), Yongbok Kim, 2017/03/20
- Re: [Qemu-devel] [PULL for v2.9 00/10] target-mips queue, Peter Maydell, 2017/03/20