OpenE2K/qemu-e2k
13
4
Fork 0
Code Issues 4 Pull Requests Projects 2 Releases Activity
6a9e5cc61c
qemu-e2k/hw/usb
History
Mauro Matteo Cascella bea2a9e3e0 hw/usb/hcd-dwc2: fix divide-by-zero in dwc2_handle_packet() 
Check the value of mps to avoid potential divide-by-zero later in the function.
Since HCCHAR_MPS is guest controllable, this prevents a malicious/buggy guest
from crashing the QEMU process on the host.

Signed-off-by: Mauro Matteo Cascella <mcascell@redhat.com>
Reviewed-by: Paul Zimmerman <pauldzim@gmail.com>
Reported-by: Gaoning Pan <gaoning.pgn@antgroup.com>
Reported-by: Xingwei Lin <linyi.lxw@antfin.com>
Message-id: 20201015075957.268823-1-mcascell@redhat.com
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
2020-10-19 09:17:21 +02:00
..
bus.c usb/bus: Remove dead assignment in usb_get_fw_dev_path() 2020-09-01 12:03:39 +02:00
ccid-card-emulated.c hw/usb: Use lock guard macros 2020-09-28 13:13:58 +02:00
ccid-card-passthru.c Use DECLARE_*CHECKER* macros 2020-09-09 09:27:09 -04:00
ccid.h Use OBJECT_DECLARE_TYPE when possible 2020-09-18 14:12:32 -04:00
chipidea.c
combined-packet.c
core.c usb: fix setup_len init (CVE-2020-14364) 2020-08-31 08:23:39 +02:00
desc-msos.c
desc.c
desc.h
dev-audio.c Use OBJECT_DECLARE_SIMPLE_TYPE when possible 2020-09-18 14:12:32 -04:00
dev-hid.c Use OBJECT_DECLARE_SIMPLE_TYPE when possible 2020-09-18 14:12:32 -04:00
dev-hub.c Use OBJECT_DECLARE_SIMPLE_TYPE when possible 2020-09-18 14:12:32 -04:00
dev-mtp.c Use OBJECT_DECLARE_SIMPLE_TYPE when possible 2020-09-18 14:12:32 -04:00
dev-network.c Use OBJECT_DECLARE_SIMPLE_TYPE when possible 2020-09-18 14:12:32 -04:00
dev-serial.c Use OBJECT_DECLARE_SIMPLE_TYPE when possible 2020-09-18 14:12:32 -04:00
dev-smartcard-reader.c Use OBJECT_DECLARE_SIMPLE_TYPE when possible 2020-09-18 14:12:32 -04:00
dev-storage.c Use DECLARE_*CHECKER* macros 2020-09-09 09:27:09 -04:00
dev-uas.c Use OBJECT_DECLARE_SIMPLE_TYPE when possible 2020-09-18 14:12:32 -04:00
dev-wacom.c Use OBJECT_DECLARE_SIMPLE_TYPE when possible 2020-09-18 14:12:32 -04:00
hcd-dwc2.c hw/usb/hcd-dwc2: fix divide-by-zero in dwc2_handle_packet() 2020-10-19 09:17:21 +02:00
hcd-dwc2.h Use OBJECT_DECLARE_TYPE when possible 2020-09-18 14:12:32 -04:00
hcd-ehci-pci.c
hcd-ehci-sysbus.c
hcd-ehci.c usb/hcd-ehci: Fix error handling on missing device for iTD 2020-10-19 09:17:08 +02:00
hcd-ehci.h Use OBJECT_DECLARE_SIMPLE_TYPE when possible 2020-09-18 14:12:32 -04:00
hcd-musb.c
hcd-ohci-pci.c Use OBJECT_DECLARE_SIMPLE_TYPE when possible 2020-09-18 14:12:32 -04:00
hcd-ohci.c hw: usb: hcd-ohci: check for processed TD before retire 2020-09-21 09:44:54 +02:00
hcd-ohci.h Use OBJECT_DECLARE_SIMPLE_TYPE when possible 2020-09-18 14:12:32 -04:00
hcd-uhci.c Use DECLARE_*CHECKER* macros 2020-09-09 09:27:09 -04:00
hcd-xhci-nec.c usb/hcd-xhci: Split pci wrapper for xhci base model 2020-09-28 12:40:11 +02:00
hcd-xhci-pci.c usb/hcd-xhci: Split pci wrapper for xhci base model 2020-09-28 12:40:11 +02:00
hcd-xhci-pci.h usb/hcd-xhci: Split pci wrapper for xhci base model 2020-09-28 12:40:11 +02:00
hcd-xhci-sysbus.c usb: hcd-xhci-sysbus: Attach xhci to sysbus device 2020-09-28 12:40:11 +02:00
hcd-xhci-sysbus.h usb: hcd-xhci-sysbus: Attach xhci to sysbus device 2020-09-28 12:40:11 +02:00
hcd-xhci.c usb/hcd-xhci: Split pci wrapper for xhci base model 2020-09-28 12:40:11 +02:00
hcd-xhci.h usb: hcd-xhci-sysbus: Attach xhci to sysbus device 2020-09-28 12:40:11 +02:00
host-libusb.c Use OBJECT_DECLARE_SIMPLE_TYPE when possible 2020-09-18 14:12:32 -04:00
host-stub.c
host.h
imx-usb-phy.c
Kconfig usb: hcd-xhci-sysbus: Attach xhci to sysbus device 2020-09-28 12:40:11 +02:00
libhw.c
meson.build usb: hcd-xhci-sysbus: Attach xhci to sysbus device 2020-09-28 12:40:11 +02:00
quirks-ftdi-ids.h
quirks-pl2303-ids.h
quirks.c
quirks.h
redirect.c trivial patches pull request 20200911 2020-09-12 14:23:15 +01:00
trace-events trace-events: Fix attribution of trace points to source 2020-09-09 17:17:58 +01:00
trace.h trace: switch position of headers to what Meson requires 2020-08-21 06:18:24 -04:00
tusb6010.c Use OBJECT_DECLARE_SIMPLE_TYPE when possible 2020-09-18 14:12:32 -04:00
u2f-emulated.c usb: fix u2f build 2020-09-21 09:44:54 +02:00
u2f-passthru.c util: rename qemu_open() to qemu_open_old() 2020-09-16 10:33:48 +01:00
u2f.c hw/usb: Add U2F key base class implementation 2020-08-31 08:10:47 +02:00
u2f.h hw/usb: Add U2F key base class 2020-08-31 08:10:47 +02:00
xen-usb.c