qemu-e2k/hw
Stephen Longfield 93c9678de9 hw/net: Fix read of uninitialized memory in imx_fec.
Size is used at lines 1088/1188 for the loop, which reads the last 4
bytes from the crc_ptr so it does need to get increased, however it
shouldn't be increased before the buffer is passed to CRC computation,
or the crc32 function will access uninitialized memory.

This was pointed out to me by clg@kaod.org during the code review of
a similar patch to hw/net/ftgmac100.c

Change-Id: Ib0464303b191af1e28abeb2f5105eb25aadb5e9b
Signed-off-by: Stephen Longfield <slongfield@google.com>
Reviewed-by: Patrick Venture <venture@google.com>
Message-id: 20221221183202.3788132-1-slongfield@google.com
Reviewed-by: Peter Maydell <peter.maydell@linaro.org>
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
2023-01-05 15:33:00 +00:00
..
9pfs hw/9pfs: Replace the direct call to xxxat() APIs with a wrapper 2022-12-23 11:48:13 +01:00
acpi hw/acpi: Rename tco.c -> ich9_tco.c 2022-12-21 07:32:24 -05:00
adc
alpha
arm i.MX7D: Connect IRQs to GPIO devices. 2023-01-05 15:04:17 +00:00
audio hw/audio/intel-hda: Drop unnecessary prototype 2022-11-23 12:30:45 +01:00
avr
block hw/virtio: generalise CHR_EVENT_CLOSED handling 2022-12-01 02:30:13 -05:00
char cleanup: Tweak and re-run return_directly.cocci 2022-12-14 16:19:35 +01:00
core hw: Add compat machines for 8.0 2022-12-21 06:35:28 -05:00
cpu
cris
cxl
display hw/display/virtio-vga: Convert TYPE_VIRTIO_VGA_BASE to 3-phase reset 2022-12-16 15:59:07 +00:00
dma
gpio
hppa
hyperv hw/hyperv/vmbus: Use device_cold_reset() and bus_cold_reset() 2022-12-16 15:55:32 +00:00
i2c
i386 pci: drop redundant PCIDeviceClass::is_bridge field 2022-12-21 07:32:24 -05:00
ide
input hw/input/tsc2xxx: Constify set_transform()'s MouseTransformInfo arg 2023-01-05 14:11:15 +00:00
intc hw/intc/xics: Convert TYPE_ICS to 3-phase reset 2022-12-16 15:59:07 +00:00
ipack
ipmi
isa hw/isa: enable TCO watchdog reboot pin strap by default 2022-12-21 06:35:28 -05:00
loongarch hw/loongarch/virt: Add cfi01 pflash device 2022-12-15 15:46:12 +08:00
m68k hw: Add compat machines for 8.0 2022-12-21 06:35:28 -05:00
mem hw/cxl/device: Add Flex Bus Port DVSEC 2022-12-21 07:32:24 -05:00
microblaze
mips
misc i.MX6UL: Add a specific GPT timer instance for the i.MX6UL 2023-01-05 15:02:08 +00:00
net hw/net: Fix read of uninitialized memory in imx_fec. 2023-01-05 15:33:00 +00:00
nios2
nubus
nvme Drop more useless casts from void * to pointer 2022-12-14 16:19:35 +01:00
nvram qapi machine: Elide redundant has_FOO in generated C 2022-12-14 20:04:47 +01:00
openrisc
pci virtio,pc,pci: features, cleanups, fixes 2022-12-21 15:44:08 +00:00
pci-bridge pci: drop redundant PCIDeviceClass::is_bridge field 2022-12-21 07:32:24 -05:00
pci-host pci: drop redundant PCIDeviceClass::is_bridge field 2022-12-21 07:32:24 -05:00
pcmcia
ppc ppc patch queue for 2022-12-21: 2022-12-21 18:08:09 +00:00
rdma cleanup: Tweak and re-run return_directly.cocci 2022-12-14 16:19:35 +01:00
remote Replace use of qdev_reset_all() with device_cold_reset() 2022-12-16 15:55:32 +00:00
riscv
rtc
rx
s390x hw: Add compat machines for 8.0 2022-12-21 06:35:28 -05:00
scsi vhost: enable vrings in vhost_dev_start() for vhost-user devices 2022-12-01 02:30:04 -05:00
sd hw/sd/sdhci: Support big endian SD host controller interfaces 2022-12-21 14:17:55 -03:00
sensor
sh4
smbios
sparc
sparc64
ssi
timer i.MX6UL: Add a specific GPT timer instance for the i.MX6UL 2023-01-05 15:02:08 +00:00
tpm
tricore
usb Replace use of qdev_reset_all() with device_cold_reset() 2022-12-16 15:55:32 +00:00
vfio
virtio hw/virtio: Extract QMP related code virtio-qmp.c 2022-12-21 07:32:24 -05:00
watchdog hw/watchdog: add trace events for watchdog action handling 2022-12-21 06:35:28 -05:00
xen
xenpv
xtensa
Kconfig
meson.build