]> git.ipfire.org Git - thirdparty/qemu.git/commit
projects / thirdparty / qemu.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 05d053e) | patch
hw/nvme: fix leak of uninitialized memory in io_mgmt_recv
authorKlaus Jensen <k.jensen@samsung.com>
Tue, 20 Aug 2024 04:16:48 +0000 (06:16 +0200)
committerMichael Tokarev <mjt@tls.msk.ru>
Wed, 28 Aug 2024 05:37:15 +0000 (08:37 +0300)
commit56c59278630eae2772b0bdcd465bb3f1f8db00b8
tree3633006cada82422f1d76844e892a5b24fc47195tree
parent05d053ef4aa050c47a0ccf230ba9bcbd8d9f4b86commit | diff
hw/nvme: fix leak of uninitialized memory in io_mgmt_recv

Yutaro Shimizu from the Cyber Defense Institute discovered a bug in the
NVMe emulation that leaks contents of an uninitialized heap buffer if
subsystem and FDP emulation are enabled.

Cc: qemu-stable@nongnu.org
Reported-by: Yutaro Shimizu <shimizu@cyberdefense.jp>
Signed-off-by: Klaus Jensen <k.jensen@samsung.com>
(cherry picked from commit 6a22121c4f25b181e99479f65958ecde65da1c92)
Signed-off-by: Michael Tokarev <mjt@tls.msk.ru>
hw/nvme/ctrl.c diff | blob | blame | history
Mirror of https://git.qemu.org/git/qemu.git