qemu-e2k/hw/scsi
Paolo Bonzini de594e4765 scsi: lsi: exit infinite loop while executing script (CVE-2019-12068)
When executing script in lsi_execute_script(), the LSI scsi adapter
emulator advances 's->dsp' index to read next opcode. This can lead
to an infinite loop if the next opcode is empty. Move the existing
loop exit after 10k iterations so that it covers no-op opcodes as
well.

Reported-by: Bugs SysSec <bugs-syssec@rub.de>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
2019-08-20 20:00:52 +02:00
..
emulation.c scsi-generic: avoid invalid access to struct when emulating block limits 2018-11-06 21:35:06 +01:00
esp-pci.c Include migration/vmstate.h less 2019-08-16 13:31:52 +02:00
esp.c Include migration/vmstate.h less 2019-08-16 13:31:52 +02:00
Kconfig virtio: express virtio dependencies with Kconfig 2019-03-07 21:45:53 +01:00
lsi53c895a.c scsi: lsi: exit infinite loop while executing script (CVE-2019-12068) 2019-08-20 20:00:52 +02:00
Makefile.objs scsi: express dependencies with Kconfig 2019-03-07 21:45:53 +01:00
megasas.c Include hw/qdev-properties.h less 2019-08-16 13:31:53 +02:00
mfi.h
mpi.h
mptconfig.c Include hw/hw.h exactly where needed 2019-08-16 13:31:52 +02:00
mptendian.c Include hw/hw.h exactly where needed 2019-08-16 13:31:52 +02:00
mptsas.c Include hw/qdev-properties.h less 2019-08-16 13:31:53 +02:00
mptsas.h
scsi-bus.c sysemu: Split sysemu/runstate.h off sysemu/sysemu.h 2019-08-16 13:37:36 +02:00
scsi-disk.c Clean up inclusion of sysemu/sysemu.h 2019-08-16 13:31:53 +02:00
scsi-generic.c Include hw/qdev-properties.h less 2019-08-16 13:31:53 +02:00
spapr_vscsi.c Include hw/qdev-properties.h less 2019-08-16 13:31:53 +02:00
srp.h
trace-events trace-events: Shorten file names in comments 2019-03-22 16:18:07 +00:00
vhost-scsi-common.c Include qemu/module.h where needed, drop it from qemu-common.h 2019-06-12 13:18:33 +02:00
vhost-scsi.c sysemu: Move the VMChangeStateEntry typedef to qemu/typedefs.h 2019-08-16 13:31:53 +02:00
vhost-user-scsi.c sysemu: Move the VMChangeStateEntry typedef to qemu/typedefs.h 2019-08-16 13:31:53 +02:00
viosrp.h
virtio-scsi-dataplane.c
virtio-scsi.c Include hw/qdev-properties.h less 2019-08-16 13:31:53 +02:00
vmw_pvscsi.c Include hw/qdev-properties.h less 2019-08-16 13:31:53 +02:00
vmw_pvscsi.h