qemu-patch-raspberry4/hw/sd
Prasad J Pandit 97f4ed3b71 sd: limit 'req.cmd' while using as an array index
While processing standard SD commands, the 'req.cmd' value could
lead to OOB read when used as an index into 'sd_cmd_type' or
'sd_cmd_class' arrays. Limit 'req.cmd' value to avoid such an
access.

Reported-by: Qinghao Tang <luodalongde@gmail.com>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Reviewed-by: Peter Maydell <peter.maydell@linaro.org>
Message-id: 1453315857-1352-1-git-send-email-ppandit@redhat.com
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
2016-02-11 11:17:32 +00:00
..
Makefile.objs hw: move SD/MMC devices to hw/sd/, configure with default-configs/ 2013-04-08 18:13:14 +02:00
milkymist-memcard.c lm32: Clean up includes 2016-01-29 15:07:22 +00:00
omap_mmc.c arm devices: Clean up includes 2016-01-29 15:07:25 +00:00
pl181.c arm: Clean up includes 2016-01-29 15:07:23 +00:00
pxa2xx_mmci.c arm: Clean up includes 2016-01-29 15:07:23 +00:00
sd.c sd: limit 'req.cmd' while using as an array index 2016-02-11 11:17:32 +00:00
sdhci-internal.h sdhci: Split sdhci.h for public and internal device usage 2015-10-29 17:59:27 +00:00
sdhci.c hw: Clean up includes 2016-01-29 15:07:25 +00:00
ssi-sd.c hw: Clean up includes 2016-01-29 15:07:25 +00:00