qemu-e2k/hw
Gerd Hoffmann 31fb4444a4 usb-ccid: add check message size checks
Check message size too when figuring whenever we should expect more data.
Fix debug message to show useful data, p->iov.size is fixed anyway if we
land there, print how much we got meanwhile instead.

Also check announced message size against actual message size.  That
is a more general fix for CVE-2017-5898 than commit "c7dfbf3 usb: ccid:
check ccid apdu length".

Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Reviewed-by: Marc-André Lureau <marcandre.lureau@redhat.com>
Message-id: 1487250819-23764-4-git-send-email-kraxel@redhat.com
2017-02-21 08:11:43 +01:00
..
9pfs
acpi
adc
alpha
arm aspeed: remove useless comment on controller segment size 2017-02-10 17:40:29 +00:00
audio
block virtio: Report real progress in VQ aio poll handler 2017-02-17 21:52:30 +02:00
bt
char hw/char/mcf_uart: QOMify the ColdFire UART 2017-02-16 14:06:56 +01:00
core vmstate registration: check return values 2017-02-06 13:36:49 +01:00
cpu
cris
display migration: consolidate VMStateField.start 2017-02-13 17:27:13 +00:00
dma migration: consolidate VMStateField.start 2017-02-13 17:27:13 +00:00
gpio
i2c
i386 intel_iommu: vtd_slpt_level_shift check level 2017-02-17 21:52:31 +02:00
ide ahci: advertise HOST_CAP_64 2017-02-10 11:47:11 -05:00
input
intc apic: reset apic_delivered global variable on machine reset 2017-02-16 14:06:55 +01:00
ipack
ipmi migration: consolidate VMStateField.start 2017-02-13 17:27:13 +00:00
isa Allow ISA bus to be configured out 2017-02-06 12:33:21 +11:00
lm32
m68k hw/m68k: QOMify the ColdFire interrupt controller 2017-02-18 22:23:31 +01:00
mem
microblaze
mips
misc report guest crash information in GUEST_PANICKED event 2017-02-16 15:30:49 +01:00
moxie
net virtio: use VRingMemoryRegionCaches for avail and used rings 2017-02-17 21:52:30 +02:00
nios2
nvram migration: consolidate VMStateField.start 2017-02-13 17:27:13 +00:00
openrisc target/openrisc: Rename the cpu from or32 to or1k 2017-02-14 08:14:58 +11:00
pci pcie: simplify pcie_add_capability() 2017-02-17 21:52:31 +02:00
pci-bridge
pci-host
pcmcia
ppc report guest crash information in GUEST_PANICKED event 2017-02-16 15:30:49 +01:00
s390x
scsi virtio: Report real progress in VQ aio poll handler 2017-02-17 21:52:30 +02:00
sd migration: consolidate VMStateField.start 2017-02-13 17:27:13 +00:00
sh4
smbios
sparc
sparc64
ssi aspeed/smc: use a modulo to check segment limits 2017-02-10 17:40:30 +00:00
timer migration: consolidate VMStateField.start 2017-02-13 17:27:13 +00:00
tpm
tricore
unicore32
usb usb-ccid: add check message size checks 2017-02-21 08:11:43 +01:00
vfio vfio: allow to notify unmap for very large region 2017-02-17 21:52:31 +02:00
virtio virtio: Fix no interrupt when not creating msi controller 2017-02-17 21:52:30 +02:00
watchdog wdt: Add Aspeed watchdog device model 2017-02-07 18:29:59 +00:00
xen Xen 2017/02/02 2017-02-03 12:31:40 +00:00
xenpv
xtensa
Makefile.objs