]> git.ipfire.org Git - thirdparty/qemu.git/commit
net: ne2000: check ring buffer control registers
authorPrasad J Pandit <pjp@fedoraproject.org>
Wed, 24 Feb 2016 06:11:33 +0000 (11:41 +0530)
committerMichael Roth <mdroth@linux.vnet.ibm.com>
Thu, 17 Mar 2016 21:34:56 +0000 (16:34 -0500)
commitfe90bdc25bcf9954ee286cd51de94776a17d04f6
treeed349e220bbf0c177c8f9756028f66f7ede6b133
parentaaa52713278e3002e364edee264ce2df6b2bde4e
net: ne2000: check ring buffer control registers

Ne2000 NIC uses ring buffer of NE2000_MEM_SIZE(49152)
bytes to process network packets. Registers PSTART & PSTOP
define ring buffer size & location. Setting these registers
to invalid values could lead to infinite loop or OOB r/w
access issues. Add check to avoid it.

Reported-by: Yang Hongke <yanghongke@huawei.com>
Tested-by: Yang Hongke <yanghongke@huawei.com>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Signed-off-by: Jason Wang <jasowang@redhat.com>
(cherry picked from commit 415ab35a441eca767d033a2702223e785b9d5190)
Signed-off-by: Michael Roth <mdroth@linux.vnet.ibm.com>
hw/net/ne2000.c