qemu/hw at stable-2.3 - qemu - Gitea: Git with a cup of tea

mii/qemu

mirror of https://github.com/mii443/qemu.git synced 2025-08-23 15:48:20 +00:00

Files

History

Stefan Hajnoczi 35c30d3efd rtl8139: check TCP Data Offset field (CVE-2015-5165)

The TCP Data Offset field contains the length of the header.  Make sure
it is valid and does not exceed the IP data length.

Reported-by: 朱东海(启路) <donghai.zdh@alibaba-inc.com>
Reviewed-by: Jason Wang <jasowang@redhat.com>
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
(cherry picked from commit 8357946b15)
Signed-off-by: Michael Roth <mdroth@linux.vnet.ibm.com>

2015-08-04 12:34:00 -05:00

..

9pfs: Fix warnings from Sparse

2015-03-19 11:11:55 +03:00

hw/acpi/aml-build: Fix memory leak

2015-07-29 18:21:41 -05:00

alpha: memory: Replace memory_region_init_ram with memory_region_allocate_system_memory

2015-04-10 14:15:18 +01:00

arm: memory: Replace memory_region_init_ram with memory_region_allocate_system_memory

2015-04-08 17:30:36 +01:00

pcspk: Fix I/O port name

2015-04-04 09:45:59 +03:00

fdc: force the fifo access to be in bounds of the allocated buffer

2015-07-28 18:26:06 -05:00

bt-sdp: fix broken uuids power-of-2 calculation

2015-07-28 17:46:44 -05:00

spapr_vty: lookup should only return valid VTY objects

2015-07-29 21:48:27 -05:00

hw/core: rebase sysbus_get_fw_dev_path() to g_strdup_printf()

2015-07-29 18:41:25 -05:00

icc_bus: fix typo ICC_BRIGDE -> ICC_BRIDGE

2014-11-03 19:51:56 +03:00

cris: memory: Replace memory_region_init_ram with memory_region_allocate_system_memory

2015-04-11 20:03:57 +10:00

Fix remaining warnings from Sparse (void return)

2015-03-19 11:11:55 +03:00

omap: Fix warnings from Sparse

2015-03-19 11:11:55 +03:00

omap: Fix warnings from Sparse

2015-03-19 11:11:55 +03:00

pci: Trivial device model conversions to realize

2015-02-26 12:42:16 +01:00

pc: acpi: fix pvpanic regression

2015-04-01 10:06:38 +02:00

Fix release_drive on unplugged devices (pci_piix3_xen_ide_unplug)

2015-08-04 12:25:11 -05:00

adb.c: include ADBDevice parent state in KBDState and MouseState

2015-03-09 15:00:04 +01:00

target-i386: clear bsp bit when designating bsp

2015-04-02 15:57:27 +02:00

pci: Trivial device model conversions to realize

2015-02-26 12:42:16 +01:00

hw: Mark devices picking up char backends actively FIXME

2015-04-02 15:30:28 +02:00

lm32: memory: Replace memory_region_init_ram with memory_region_allocate_system_memory

2015-04-10 14:12:20 +01:00

m68k: memory: Replace memory_region_init_ram with memory_region_allocate_system_memory

2015-03-25 14:35:24 +01:00

pc-dimm: Add description for device list.

2015-03-19 11:17:36 +03:00

Remove superfluous '\n' around error_report()

2015-03-10 08:15:33 +03:00

mips: memory: Replace memory_region_init_ram with memory_region_allocate_system_memory

2015-03-25 14:35:31 +01:00

omap: Fix warnings from Sparse

2015-03-19 11:11:55 +03:00

memory: add parameter errp to memory_region_init_ram

2014-09-09 13:41:43 +02:00

rtl8139: check TCP Data Offset field (CVE-2015-5165)

2015-08-04 12:34:00 -05:00

fw_cfg: factor out initialization of FW_CFG_ID (rev. number)

2015-03-25 13:37:10 +01:00

hw/core/loader: implement address translation in uimage loader

2014-11-03 00:59:10 +03:00

pci: Fix crash with illegal "-net nic, model=xxx" option

2015-04-13 12:11:44 +01:00

Merge remote-tracking branch 'remotes/mst/tags/for_upstream' into staging

2015-03-09 09:14:28 +00:00

mips: fix broken fulong2e machine

2015-04-17 12:11:48 +01:00

hmp: Remove "info pcmcia"

2014-10-24 12:19:11 +01:00

Merge remote-tracking branch 'remotes/bonzini/tags/for-upstream' into staging

2015-03-26 17:33:35 +00:00

s390x/ipl: Fix boot if no bootindex was specified

2015-07-29 21:47:15 -05:00

scsi: fix buffer overflow in scsi_req_parse_cdb (CVE-2015-5158)

2015-07-29 22:13:25 -05:00

sysbus: Make devices picking up backends unavailable with -device

2015-04-02 15:30:44 +02:00

r2d: Don't use legacy -usbdevice support for setting up board

2015-02-18 10:53:10 +01:00

sparc: memory: Replace memory_region_init_ram with memory_region_allocate_system_memory

2015-03-25 14:36:14 +01:00

fw_cfg: factor out initialization of FW_CFG_ID (rev. number)

2015-03-25 13:37:10 +01:00

omap: Fix warnings from Sparse

2015-03-19 11:11:55 +03:00

i8254: fix out-of-bounds memory access in pit_ioport_read()

2015-07-29 18:40:21 -05:00

Fix remaining warnings from Sparse (void return)

2015-03-19 11:11:55 +03:00

target-tricore: check return value before using it

2014-11-02 10:04:34 +03:00

unicore32: Use uc32_cpu_init()

2015-03-10 17:07:28 +01:00

usb: fix usb-net segfault

2015-07-28 18:20:04 -05:00

vfio/pci: Fix bootindex

2015-07-29 22:12:30 -05:00

vhost: correctly pass error to caller in vhost_dev_enable_notifiers()

2015-07-29 18:44:36 -05:00

i6300esb: Fix signed integer overflow

2015-03-25 13:38:05 +01:00

xen: limit guest control of PCI command register

2015-04-09 23:37:21 +01:00

hw: Convert from BlockDriverState to BlockBackend, mostly

2014-10-20 14:02:25 +02:00

xtensa: Remove superfluous '\n' around error_report()

2015-03-10 08:15:33 +03:00

Makefile.objs

vfio: move hw/misc/vfio.c to hw/vfio/pci.c Move vfio.h into include/hw/vfio

2014-12-19 15:24:06 -07:00