|
From: | Mark Cave-Ayland |
Subject: | Re: [Qemu-devel] [PATCH] apb: Fix out-of-bounds array write access |
Date: | Tue, 17 Jun 2014 20:59:46 +0100 |
User-agent: | Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Icedove/24.5.0 |
On 09/06/14 15:19, Stefan Weil wrote:
The array regs is declared with IOMMU_NREGS (3) elements and accessed using IOMMU_CTRL (0) and IOMMU_BASE (8). In most cases, those values are right shifted before being used as an index which results in indices 0 and 1. In one case, this right shift was missing for IOMMU_BASE which results in an out-of-bounds write access with index 8. The patch adds the missing shift operation also for IOMMU_CTRL where it is needed only for cosmetic reasons. Signed-off-by: Stefan Weil <address@hidden>
BTW I forgot to add - do I need to send a further pull request for this or is it intended to go via trivial?
ATB, Mark.
[Prev in Thread] | Current Thread | [Next in Thread] |