[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [PATCH v2 0/3] hw/sd/sdhci: Fix DMA Transfer Block Size field width
|
From: |
Philippe Mathieu-Daudé |
|
Subject: |
Re: [PATCH v2 0/3] hw/sd/sdhci: Fix DMA Transfer Block Size field width |
|
Date: |
Fri, 18 Sep 2020 10:27:20 +0200 |
|
User-agent: |
Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.11.0 |
On 9/1/20 4:04 PM, Philippe Mathieu-Daudé wrote:
> Fix the SDHCI issue reported last week by Alexander:
> https://bugs.launchpad.net/qemu/+bug/1892960
>
> The field is 12-bit (4KiB) but the guest can set
> up to 16-bit (64KiB), leading to OOB access.
>
> since v1:
> commited unstaged change in patch #3...
>
> Philippe Mathieu-Daudé (3):
> hw/sd/sdhci: Fix qemu_log_mask() format string
> hw/sd/sdhci: Document the datasheet used
> hw/sd/sdhci: Fix DMA Transfer Block Size field
Thanks, series applied to my sd-next tree.