]> git.ipfire.org Git - thirdparty/qemu.git/commit
usb: check page select value while processing iTD
authorPrasad J Pandit <pjp@fedoraproject.org>
Tue, 19 Jan 2016 19:56:46 +0000 (01:26 +0530)
committerMichael Roth <mdroth@linux.vnet.ibm.com>
Tue, 22 Mar 2016 22:40:40 +0000 (17:40 -0500)
commit4dcd2f13b1bf7f23a587d0e832ff30d2da6291a1
tree49c2393d379db5702d1c5266b3e7d9d54f41780e
parent38e09211b6ab29a21788a39166ded08c1724879d
usb: check page select value while processing iTD

While processing isochronous transfer descriptors(iTD), the page
select(PG) field value could lead to an OOB read access. Add
check to avoid it.

Reported-by: Qinghao Tang <luodalongde@gmail.com>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Message-id: 1453233406-12165-1-git-send-email-ppandit@redhat.com
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
(cherry picked from commit 49d925ce50383a286278143c05511d30ec41a36e)
Signed-off-by: Michael Roth <mdroth@linux.vnet.ibm.com>
hw/usb/hcd-ehci.c