summaryrefslogtreecommitdiff
path: root/stubs
diff options
context:
space:
mode:
authorStefan Weil <sw@weilnetz.de>2014-06-09 16:19:29 +0200
committerMark Cave-Ayland <mark.cave-ayland@ilande.co.uk>2014-06-20 23:52:49 +0100
commit68716da745858ca86ac587d14ac553051e5f04eb (patch)
tree15ddad480b07016c64fc23d2120b3a839b5ab8d3 /stubs
parent427e1750a0b98a72cad424327604f51e993dcc5f (diff)
downloadqemu-68716da745858ca86ac587d14ac553051e5f04eb.tar.gz
apb: Fix out-of-bounds array write access
The array regs is declared with IOMMU_NREGS (3) elements and accessed using IOMMU_CTRL (0) and IOMMU_BASE (8). In most cases, those values are right shifted before being used as an index which results in indices 0 and 1. In one case, this right shift was missing for IOMMU_BASE which results in an out-of-bounds write access with index 8. The patch adds the missing shift operation also for IOMMU_CTRL where it is needed only for cosmetic reasons. Signed-off-by: Stefan Weil <sw@weilnetz.de> Signed-off-by: Mark Cave-Ayland <mark.cave-ayland@ilande.co.uk>
Diffstat (limited to 'stubs')
0 files changed, 0 insertions, 0 deletions