OpenE2K/qemu-e2k
13
4
Fork 0
Code Issues 4 Pull Requests Projects 2 Releases Activity
13b250b12a
qemu-e2k/hw/usb
History
Gerd Hoffmann 13b250b12a uas: add stream number sanity checks. 
The device uses the guest-supplied stream number unchecked, which can
lead to guest-triggered out-of-band access to the UASDevice->data3 and
UASDevice->status3 fields.  Add the missing checks.

Fixes: CVE-2021-3713
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Reported-by: Chen Zhe <chenzhe@huawei.com>
Reported-by: Tan Jingguo <tanjingguo@huawei.com>
Reviewed-by: Philippe Mathieu-Daudé <philmd@redhat.com>
Message-Id: <20210818120505.1258262-2-kraxel@redhat.com>
2021-09-01 06:34:00 +02:00
..
bus.c usb: remove support for -usbdevice parameters 2021-03-15 17:00:58 +01:00
ccid-card-emulated.c modules: add ccid module annotations 2021-07-09 18:20:27 +02:00
ccid-card-passthru.c modules: add ccid module annotations 2021-07-09 18:20:27 +02:00
ccid.h
chipidea.c hw: Do not include qemu/log.h if it is not necessary 2021-05-02 17:24:50 +02:00
combined-packet.c usb: limit combined packets to 1 MiB (CVE-2021-3527) 2021-05-05 15:06:01 +02:00
core.c
desc-msos.c misc: Fix "havn't" typo 2021-07-09 18:42:46 +02:00
desc.c
desc.h
dev-audio.c usb: Un-deprecate -usbdevice (except for -usbdevice audio which gets removed) 2021-03-15 17:00:58 +01:00
dev-hid.c usb/hid: avoid dynamic stack allocation 2021-05-04 08:38:23 +02:00
dev-hub.c
dev-mtp.c usb/dev-mtp: use GDateTime for formatting timestamp for objects 2021-06-14 13:28:50 +01:00
dev-network.c
dev-serial.c usb: remove support for -usbdevice parameters 2021-03-15 17:00:58 +01:00
dev-smartcard-reader.c hw/usb: Constify VMStateDescription 2021-05-02 17:24:50 +02:00
dev-storage-bot.c usb: drop usb_host_dev_is_scsi_storage hook 2021-07-09 18:21:33 +02:00
dev-storage-classic.c usb: drop usb_host_dev_is_scsi_storage hook 2021-07-09 18:21:33 +02:00
dev-storage.c usb/storage: clear csw on reset 2021-03-15 17:01:17 +01:00
dev-uas.c uas: add stream number sanity checks. 2021-09-01 06:34:00 +02:00
dev-wacom.c usb/hid: avoid dynamic stack allocation 2021-05-04 08:38:23 +02:00
hcd-dwc2.c
hcd-dwc2.h
hcd-dwc3.c hw: Do not include qemu/log.h if it is not necessary 2021-05-02 17:24:50 +02:00
hcd-ehci-pci.c
hcd-ehci-sysbus.c hw/usb/hcd-ehci-sysbus: Free USBPacket on instance finalize() 2021-03-26 09:14:48 +01:00
hcd-ehci.c hw/usb/hcd-ehci: Fix crash when showing help of EHCI devices 2021-03-26 11:10:49 +01:00
hcd-ehci.h
hcd-musb.c
hcd-ohci-pci.c
hcd-ohci.c
hcd-ohci.h
hcd-uhci.c hw/usb: Extract VT82C686 UHCI PCI function into a new unit 2021-03-15 17:00:59 +01:00
hcd-uhci.h hw/usb/hcd-uhci: Expose generic prototypes to local header 2021-03-15 17:00:59 +01:00
hcd-xhci-nec.c
hcd-xhci-pci.c hw/usb: hcd-xhci-pci: Fix spec violation of IP flag for MSI/MSI-X 2021-05-28 09:10:20 +02:00
hcd-xhci-pci.h
hcd-xhci-sysbus.c hw/usb: hcd-xhci-pci: Fix spec violation of IP flag for MSI/MSI-X 2021-05-28 09:10:20 +02:00
hcd-xhci-sysbus.h
hcd-xhci.c hw/usb: hcd-xhci-pci: Fix spec violation of IP flag for MSI/MSI-X 2021-05-28 09:10:20 +02:00
hcd-xhci.h hw/usb: hcd-xhci-pci: Fix spec violation of IP flag for MSI/MSI-X 2021-05-28 09:10:20 +02:00
host-libusb.c usb-host: wire up timer for windows 2021-07-29 11:18:24 +02:00
host.h
imx-usb-phy.c hw: Do not include qemu/log.h if it is not necessary 2021-05-02 17:24:50 +02:00
Kconfig usb/storage: add kconfig symbols 2021-03-15 17:01:12 +01:00
libhw.c
meson.build usb: fix usb-host dependency check 2021-07-22 14:44:47 +02:00
pcap.c
quirks-ftdi-ids.h Drop the deprecated lm32 target 2021-05-12 18:20:25 +02:00
quirks-pl2303-ids.h
quirks.c
quirks.h Drop the deprecated lm32 target 2021-05-12 18:20:25 +02:00
redirect.c chardev: mark explicitly first argument as poisoned 2021-08-05 16:15:33 +04:00
trace-events docs: fix references to docs/devel/tracing.rst 2021-06-02 06:51:09 +02:00
trace.h
tusb6010.c
u2f-emulated.c
u2f-passthru.c
u2f.c usb: remove '-usbdevice u2f-key' 2021-03-15 17:00:58 +01:00
u2f.h
vt82c686-uhci-pci.c hw/usb: Extract VT82C686 UHCI PCI function into a new unit 2021-03-15 17:00:59 +01:00
xen-usb.c hw: Do not include hw/sysbus.h if it is not necessary 2021-05-02 17:24:50 +02:00
xlnx-usb-subsystem.c hw: Do not include qemu/log.h if it is not necessary 2021-05-02 17:24:50 +02:00
xlnx-versal-usb2-ctrl-regs.c hw: Do not include qemu/log.h if it is not necessary 2021-05-02 17:24:50 +02:00