qemu-patch-raspberry4/hw/char
linzhecheng d434e5ac5d virtio-serial: fix heap-over-flow
Check device having the feature of VIRTIO_CONSOLE_F_EMERG_WRITE before
get config->emerg_wr. It is neccessary because sizeof(virtio_console_config)
is 8 byte if VirtIOSerial doesn't have the feature of
VIRTIO_CONSOLE_F_EMERG_WRITE(see virtio_serial_device_realize),
read/write emerg_wr will lead to heap-over-flow.

Signed-off-by: linzhecheng <linzhecheng@huawei.com>
Reviewed-by: Stefan Hajnoczi <stefanha@redhat.com>
Reviewed-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
2018-04-09 17:35:46 +03:00
..
bcm2835_aux.c
cadence_uart.c
cmsdk-apb-uart.c
debugcon.c
digic-uart.c
escc.c
etraxfs_ser.c
exynos4210_uart.c
grlib_apbuart.c
imx_serial.c i.MX: Support serial RS-232 break properly 2018-03-23 18:26:45 +00:00
ipoctal232.c
lm32_juart.c
lm32_uart.c
Makefile.objs hw/isa: Move parallel_hds_isa_init() to hw/char/parallel-isa.c 2018-03-12 16:12:47 +01:00
mcf_uart.c
milkymist-uart.c
omap_uart.c
parallel-isa.c hw/isa: Move parallel_hds_isa_init() to hw/char/parallel-isa.c 2018-03-12 16:12:47 +01:00
parallel.c hw/isa: Move parallel_hds_isa_init() to hw/char/parallel-isa.c 2018-03-12 16:12:47 +01:00
pl011.c
sclpconsole-lm.c s390x/sclp: clean up sclp masks 2018-03-08 15:49:23 +01:00
sclpconsole.c s390x/sclp: clean up sclp masks 2018-03-08 15:49:23 +01:00
serial-isa.c
serial-pci.c
serial.c
sh_serial.c
spapr_vty.c
stm32f2xx_usart.c
terminal3270.c
trace-events
virtio-console.c Include less of the generated modular QAPI headers 2018-03-02 13:45:50 -06:00
virtio-serial-bus.c virtio-serial: fix heap-over-flow 2018-04-09 17:35:46 +03:00
xen_console.c
xilinx_uartlite.c