[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Qemu-devel] [PATCH v2 for v2.3.0] fw_cfg: add check to validate cur

From: P J P
Subject: Re: [Qemu-devel] [PATCH v2 for v2.3.0] fw_cfg: add check to validate current entry value
Date: Mon, 11 Jan 2016 12:53:49 +0530 (IST)


+-- On Wed, 6 Jan 2016, P J P wrote --+
| When processing firmware configurations, an OOB r/w access occurs
| if 's->cur_entry' is set to be invalid(FW_CFG_INVALID=0xffff).
| Add a check to validate 's->cur_entry' to avoid such access.
| Reported-by: Donghai Zdh <address@hidden>
| Signed-off-by: Prasad J Pandit <address@hidden>
| ---
|  hw/nvram/fw_cfg.c | 12 ++++++++----
|  1 file changed, 8 insertions(+), 4 deletions(-)
| Updated as per review in
|   -> https://lists.gnu.org/archive/html/qemu-devel/2016-01/msg00398.html

  -> https://patchwork.ozlabs.org/patch/563706/

Ping...! Does it look okay? (just checking)

Thank you.
Prasad J Pandit / Red Hat Product Security Team
47AF CE69 3A90 54AA 9045 1053 DD13 3D32 FE5B 041F

reply via email to

[Prev in Thread] Current Thread [Next in Thread]