]> git.ipfire.org Git - thirdparty/qemu.git/commit
projects / thirdparty / qemu.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f6f03df) | patch
hw/nvme: fix leak of uninitialized memory in io_mgmt_recv
authorKlaus Jensen <k.jensen@samsung.com>
Tue, 20 Aug 2024 04:16:48 +0000 (06:16 +0200)
committerMichael Tokarev <mjt@tls.msk.ru>
Wed, 28 Aug 2024 05:37:29 +0000 (08:37 +0300)
commit4358fa333eafd588aca210cd5fa7b7effb0d7f0b
treecad8c0293874fc025609579e36c7ef83c1136563tree
parentf6f03df49f771a29ec6bd69fe098e8dbf5eebb03commit | diff
hw/nvme: fix leak of uninitialized memory in io_mgmt_recv

Yutaro Shimizu from the Cyber Defense Institute discovered a bug in the
NVMe emulation that leaks contents of an uninitialized heap buffer if
subsystem and FDP emulation are enabled.

Cc: qemu-stable@nongnu.org
Reported-by: Yutaro Shimizu <shimizu@cyberdefense.jp>
Signed-off-by: Klaus Jensen <k.jensen@samsung.com>
(cherry picked from commit 6a22121c4f25b181e99479f65958ecde65da1c92)
Signed-off-by: Michael Tokarev <mjt@tls.msk.ru>
hw/nvme/ctrl.c diff | blob | blame | history
Mirror of https://git.qemu.org/git/qemu.git