OpenE2K/qemu-e2k
13
4
Fork 0
Code Issues 4 Pull Requests Projects 2 Releases Activity
9fbad2ca36
qemu-e2k/hw
History
Prasad J Pandit 415ab35a44 net: ne2000: check ring buffer control registers 
Ne2000 NIC uses ring buffer of NE2000_MEM_SIZE(49152)
bytes to process network packets. Registers PSTART & PSTOP
define ring buffer size & location. Setting these registers
to invalid values could lead to infinite loop or OOB r/w
access issues. Add check to avoid it.

Reported-by: Yang Hongke <yanghongke@huawei.com>
Tested-by: Yang Hongke <yanghongke@huawei.com>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Signed-off-by: Jason Wang <jasowang@redhat.com>
2016-03-08 15:34:09 +08:00
..
9pfs all: Clean up includes 2016-02-23 12:43:05 +00:00
acpi qapi-dealloc: Reduce use outside of generated code 2016-03-04 17:16:32 +01:00
alpha loader: Add data swap option to load-elf 2016-03-04 11:30:21 +00:00
arm arm: boot: Support big-endian elfs 2016-03-04 11:30:21 +00:00
audio all: Clean up includes 2016-02-23 12:43:05 +00:00
block virtio-blk: do not use vring in dataplane 2016-02-25 13:14:18 +02:00
bt hw: Clean up includes 2016-01-29 15:07:25 +00:00
char ui: Shorten references into InputEvent 2016-03-05 10:41:55 +01:00
core loader: Add data swap option to load-elf 2016-03-04 11:30:21 +00:00
cpu hw/intc/arm_gic.c: Implement GICv2 GICC_DIR 2016-03-04 11:30:22 +00:00
cris loader: Add data swap option to load-elf 2016-03-04 11:30:21 +00:00
display qxl: lock current_async update in qxl_soft_reset 2016-03-01 07:51:32 +01:00
dma i8257: fix Terminal Count status 2016-03-07 13:18:28 +01:00
gpio ARM: PL061: Checking register r/w accesses to reserved area 2016-02-26 15:09:42 +00:00
i2c hw: Clean up includes 2016-01-29 15:07:25 +00:00
i386 loader: Add data swap option to load-elf 2016-03-04 11:30:21 +00:00
ide ahci: prohibit "restarting" the FIS or CLB engines 2016-02-10 13:29:40 -05:00
input ui: Shorten references into InputEvent 2016-03-05 10:41:55 +01:00
intc hw/intc/arm_gic.c: Implement GICv2 GICC_DIR 2016-03-04 11:30:22 +00:00
ipack hw: Clean up includes 2016-01-29 15:07:25 +00:00
ipmi ipmi: sensor number should not exceed MAX_SENSORS 2016-02-16 16:41:25 +01:00
isa ich9: Remove enable_tco arguments from init functions 2016-02-25 13:14:19 +02:00
lm32 loader: Add data swap option to load-elf 2016-03-04 11:30:21 +00:00
m68k loader: Add data swap option to load-elf 2016-03-04 11:30:21 +00:00
mem move get_current_ram_size to virtio-balloon.c 2016-02-23 12:55:16 +02:00
microblaze loader: Add data swap option to load-elf 2016-03-04 11:30:21 +00:00
mips loader: Add data swap option to load-elf 2016-03-04 11:30:21 +00:00
misc memory: Drop MemoryRegion.ram_addr 2016-03-07 13:26:29 +01:00
moxie loader: Add data swap option to load-elf 2016-03-04 11:30:21 +00:00
net net: ne2000: check ring buffer control registers 2016-03-08 15:34:09 +08:00
nvram fw_cfg: unbreak migration compatibility for 2.4 and earlier machines 2016-02-26 10:06:40 +01:00
openrisc loader: Add data swap option to load-elf 2016-03-04 11:30:21 +00:00
pci pci core: function pci_bus_init() cleanup 2016-02-25 13:14:18 +02:00
pci-bridge aer: impove pcie_aer_init to support vfio device 2016-02-19 09:42:28 -07:00
pci-host loader: Add data swap option to load-elf 2016-03-04 11:30:21 +00:00
pcmcia hw: Clean up includes 2016-01-29 15:07:25 +00:00
ppc loader: Add data swap option to load-elf 2016-03-04 11:30:21 +00:00
s390x loader: Add data swap option to load-elf 2016-03-04 11:30:21 +00:00
scsi scsi-bus: Remove tape command from scsi_req_xfer 2016-03-07 17:56:23 +01:00
sd sdhci: Implement DeviceClass reset 2016-03-04 11:30:17 +00:00
sh4 sh4: Clean up includes 2016-01-29 15:07:24 +00:00
smbios hw: Clean up includes 2016-01-29 15:07:25 +00:00
sparc loader: Add data swap option to load-elf 2016-03-04 11:30:21 +00:00
sparc64 loader: Add data swap option to load-elf 2016-03-04 11:30:21 +00:00
ssi hw: Clean up includes 2016-01-29 15:07:25 +00:00
timer tusb6010: move from hw/timer to hw/usb 2016-02-23 10:38:00 +01:00
tpm hw: Clean up includes 2016-01-29 15:07:25 +00:00
tricore loader: Add data swap option to load-elf 2016-03-04 11:30:21 +00:00
unicore32
usb usb-redirect: Avoid double free of data 2016-02-29 11:45:26 +01:00
vfio all: Clean up includes 2016-02-23 12:43:05 +00:00
virtio virtio-rng: ask for more data if queue is not fully drained 2016-03-03 17:42:26 +05:30
watchdog watchdog/diag288: avoid race condition on expired watchdog 2016-03-01 12:15:28 +01:00
xen xen: drop XenXC and associated interface wrappers 2016-02-10 12:01:24 +00:00
xenpv
xtensa loader: Add data swap option to load-elf 2016-03-04 11:30:21 +00:00
Makefile.objs