qemu-e2k/hw/input
Michael S. Tsirkin 5193be3be3 tsc210x: fix buffer overrun on invalid state load
CVE-2013-4539

s->precision, nextprecision, function and nextfunction
come from wire and are used
as idx into resolution[] in TSC_CUT_RESOLUTION.

Validate after load to avoid buffer overrun.

Cc: Andreas Färber <afaerber@suse.de>
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Juan Quintela <quintela@redhat.com>
2014-05-05 22:15:02 +02:00
..
adb.c
hid.c
lm832x.c
Makefile.objs
milkymist-softusb.c
pckbd.c pckbd: return 'keyboard enabled' on read input port command 2014-03-09 21:09:38 +02:00
pl050.c
ps2.c
pxa2xx_keypad.c
stellaris_input.c
tsc210x.c tsc210x: fix buffer overrun on invalid state load 2014-05-05 22:15:02 +02:00
tsc2005.c
vmmouse.c