[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Qemu-devel] [PATCH] hw/sd: fix out-of-bounds check for multi block read
From: |
Michael Olbrich |
Subject: |
[Qemu-devel] [PATCH] hw/sd: fix out-of-bounds check for multi block reads |
Date: |
Sat, 16 Sep 2017 11:16:11 +0200 |
The current code checks if the next block exceeds the size of the card.
This generates an error while reading the last block of the card.
Do the out-of-bounds check when starting to read a new block to fix this.
This issue became visible with increased error checking in Linux 4.13.
Signed-off-by: Michael Olbrich <address@hidden>
---
hw/sd/sd.c | 12 ++++++------
1 file changed, 6 insertions(+), 6 deletions(-)
diff --git a/hw/sd/sd.c b/hw/sd/sd.c
index ba47bff4db80..94ff52512c43 100644
--- a/hw/sd/sd.c
+++ b/hw/sd/sd.c
@@ -1797,8 +1797,13 @@ uint8_t sd_read_data(SDState *sd)
break;
case 18: /* CMD18: READ_MULTIPLE_BLOCK */
- if (sd->data_offset == 0)
+ if (sd->data_offset == 0) {
+ if (sd->data_start + io_len > sd->size) {
+ sd->card_status |= ADDRESS_ERROR;
+ break;
+ }
BLK_READ_BLOCK(sd->data_start, io_len);
+ }
ret = sd->data[sd->data_offset ++];
if (sd->data_offset >= io_len) {
@@ -1812,11 +1817,6 @@ uint8_t sd_read_data(SDState *sd)
break;
}
}
-
- if (sd->data_start + io_len > sd->size) {
- sd->card_status |= ADDRESS_ERROR;
- break;
- }
}
break;
--
2.14.1
- [Qemu-devel] [PATCH] hw/sd: fix out-of-bounds check for multi block reads,
Michael Olbrich <=
- Re: [Qemu-devel] [PATCH] hw/sd: fix out-of-bounds check for multi block reads, no-reply, 2017/09/16
- [Qemu-devel] [PATCH v2] hw/sd: fix out-of-bounds check for multi block reads, Michael Olbrich, 2017/09/16
- Re: [Qemu-devel] [PATCH v2] hw/sd: fix out-of-bounds check for multi block reads, Alistair Francis, 2017/09/18
- Re: [Qemu-devel] [PATCH v2] hw/sd: fix out-of-bounds check for multi block reads, Michael Olbrich, 2017/09/19
- Re: [Qemu-devel] [PATCH v2] hw/sd: fix out-of-bounds check for multi block reads, Alistair Francis, 2017/09/19
- Re: [Qemu-devel] [PATCH v2] hw/sd: fix out-of-bounds check for multi block reads, Michael Olbrich, 2017/09/20
- Re: [Qemu-devel] [PATCH v2] hw/sd: fix out-of-bounds check for multi block reads, Peter Maydell, 2017/09/25
- Re: [Qemu-devel] [PATCH v2] hw/sd: fix out-of-bounds check for multi block reads, Alistair Francis, 2017/09/25
- Re: [Qemu-devel] [PATCH v2] hw/sd: fix out-of-bounds check for multi block reads, Peter Maydell, 2017/09/25
- Re: [Qemu-devel] [PATCH v2] hw/sd: fix out-of-bounds check for multi block reads, Alistair Francis, 2017/09/25