mii/qemu
1
0
Fork 0
mirror of https://github.com/mii443/qemu.git synced 2025-08-26 00:49:39 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
19a5452723b51af74489d6cfa481b9d45d0b565a
qemu/hw
History
Philippe Mathieu-Daudé 79fa99831d hw/audio/intel-hda: Restrict DMA engine to memories (not MMIO devices) 
Issue #542 reports a reentrancy problem when the DMA engine accesses
the HDA controller I/O registers. Fix by restricting the DMA engine
to memories regions (forbidding MMIO devices such the HDA controller).

Reported-by: OSS-Fuzz (Issue 28435)
Reported-by: Alexander Bulekov <alxndr@bu.edu>
Signed-off-by: Philippe Mathieu-Daudé <philmd@redhat.com>
Reviewed-by: Thomas Huth <thuth@redhat.com>
Resolves: https://gitlab.com/qemu-project/qemu/-/issues/542
CVE: CVE-2021-3611
Message-Id: <20211218160912.1591633-3-philmd@redhat.com>
Signed-off-by: Thomas Huth <thuth@redhat.com>
2022-03-21 10:24:51 +01:00
..
9pfs
9pfs/coth.h: drop Doxygen format on v9fs_co_run_in_worker()
2022-03-07 11:49:31 +01:00
acpi
hw/acpi: add indication for i8042 in IA-PC boot flags of the FADT table
2022-03-06 16:06:16 -05:00
adc
hw/adc: Add basic Aspeed ADC model
2021-10-12 08:20:08 +02:00
alpha
…
arm
hw/arm/xlnx-zynqmp: Connect the ZynqMP APU Control
2022-03-18 11:31:20 +00:00
audio
hw/audio/intel-hda: Restrict DMA engine to memories (not MMIO devices)
2022-03-21 10:24:51 +01:00
avr
hw/avr: Realize AVRCPU qdev object using qdev_realize()
2021-12-17 10:43:24 +01:00
block
Merge remote-tracking branch 'remotes/legoater/tags/pull-aspeed-20220308' into staging
2022-03-09 18:06:40 +00:00
char
hw/isa: Inline and remove one-line isa_init_irq()
2022-03-08 19:38:17 +01:00
core
clock-vmstate: Add missing END_OF_LIST
2022-03-02 18:12:40 +00:00
cpu
…
cris
…
display
hw/display/vga: Report a proper error when adding a 2nd ISA VGA
2022-03-18 10:15:57 +01:00
dma
hw/dma/xlnx_csu_dma: Set TYPE_XLNX_CSU_DMA class_size
2022-03-18 10:55:15 +00:00
gpio
hw: aspeed_gpio: Cleanup stray semicolon after switch
2022-03-08 09:18:11 +01:00
hppa
hppa: Add support for an emulated TOC/NMI button.
2022-02-02 18:46:42 +01:00
hyperv
dma: Let dma_memory_map() take MemTxAttrs argument
2021-12-30 17:16:32 +01:00
i2c
hw/i2c: Added linear mode translation for pmbus devices
2022-03-08 18:46:48 +01:00
i386
hw/i386/acpi-build: Avoid 'sun' identifier
2022-03-18 11:32:13 +00:00
ide
Merge remote-tracking branch 'remotes/philmd/tags/mips-20220308' into staging
2022-03-09 09:13:39 +00:00
input
hw/isa: Inline and remove one-line isa_init_irq()
2022-03-08 19:38:17 +01:00
intc
hw/intc: Rename CONFIG_ARM_GIC_TCG into CONFIG_ARM_GICV3_TCG
2022-03-18 10:55:15 +00:00
ipack
qbus: Rename qbus_create_inplace() to qbus_init()
2021-09-30 13:42:10 +01:00
ipmi
hw/isa: Inline and remove one-line isa_init_irq()
2022-03-08 19:38:17 +01:00
isa
hw/isa: Inline and remove one-line isa_init_irq()
2022-03-08 19:38:17 +01:00
m68k
mos6522: implement edge-triggering for CA1/2 and CB1/2 control line IRQs
2022-03-09 09:28:28 +00:00
mem
Mark remaining global TypeInfo instances as const
2022-02-21 13:30:20 +00:00
microblaze
hw/microblaze: Replace drive_get_next() by drive_get()
2021-12-15 08:38:16 +01:00
mips
hw/mips/gt64xxx_pci: Resolve gt64120_register()
2022-03-08 19:38:13 +01:00
misc
hw/misc: Add a model of the Xilinx ZynqMP APU Control
2022-03-18 11:31:20 +00:00
net
virtio-net: fix map leaking on error during receive
2022-03-15 13:57:44 +08:00
nios2
…
nubus
qbus: Rename qbus_create_inplace() to qbus_init()
2021-09-30 13:42:10 +01:00
nvme
hw/nvme: 64-bit pi support
2022-03-03 09:30:21 +01:00
nvram
hw/nvram: at24 return 0xff if 1 byte address
2022-03-14 14:48:35 +01:00
openrisc
hw/openrisc/openrisc_sim: Add support for initrd loading
2022-02-26 10:39:36 +09:00
pci
hw/pci/pci.c: Fix typos of "Firewire", and of "controller" on same line
2022-03-18 13:54:19 +01:00
pci-bridge
pci: expose TYPE_XIO3130_DOWNSTREAM name
2022-03-06 05:08:23 -05:00
pci-host
ppc/pnv: Remove user-created PHB{3,4,5} devices
2022-03-14 15:57:17 +01:00
pcmcia
…
ppc
ppc/pnv: Remove user-created PHB{3,4,5} devices
2022-03-14 15:57:17 +01:00
rdma
hw/dma: Use dma_addr_t type definition when relevant
2022-01-18 12:56:29 +01:00
remote
hw/remote: Add missing include
2022-02-21 10:18:06 +01:00
riscv
hw: riscv: opentitan: fixup SPI addresses
2022-03-03 13:14:50 +10:00
rtc
hw/isa: Inline and remove one-line isa_init_irq()
2022-03-08 19:38:17 +01:00
rx
…
s390x
s390x/cpumodel: Bump up QEMU model to a stripped-down IBM z15 GA1
2022-02-28 11:29:15 +01:00
scsi
esp: recreate ESPState current_req after migration
2022-03-09 09:29:10 +00:00
sd
Mark remaining global TypeInfo instances as const
2022-02-21 13:30:20 +00:00
sensor
hw/sensor: add Renesas raa228000 device
2022-03-08 18:46:48 +01:00
sh4
hw/intc/sh_intc: Inline and drop sh_intc_source() function
2021-10-30 18:39:37 +02:00
smbios
hw/smbios: Add table 4 parameter, "processor-id"
2022-03-06 05:28:55 -05:00
sparc
sun4m: fix setting CPU id when more than one CPU is present
2021-09-08 11:09:45 +01:00
sparc64
hw: Replace trivial drive_get_next() by drive_get()
2021-12-15 08:38:16 +01:00
ssi
aspeed/smc: Fix error log
2022-03-08 09:18:11 +01:00
timer
hw/timer: fix a9gtimer vmstate
2022-02-21 13:30:21 +00:00
tpm
Merge remote-tracking branch 'remotes/philmd/tags/mips-20220308' into staging
2022-03-09 09:13:39 +00:00
tricore
hw/tricore: fix inclusion of tricore_testboard
2021-07-20 20:10:21 +02:00
usb
hw/usb/redirect.c: Stop using qemu_oom_check()
2022-03-04 11:20:16 +01:00
vfio
kvm/msi: do explicit commit when adding msi routes
2022-03-15 11:26:20 +01:00
virtio
virtio/virtio-balloon: Prefer Object* over void* parameter
2022-03-18 13:57:50 +01:00
watchdog
watchdog: remove select_watchdog_action
2021-11-02 15:57:27 +01:00
xen
aio-posix: split poll check from ready handler
2022-01-12 17:09:39 +00:00
xenpv
…
xtensa
…
Kconfig
hw/arm: xlnx-zcu102: Add Xilinx eFUSE device
2021-09-30 13:42:10 +01:00
meson.build
…