linzhecheng d434e5ac5d virtio-serial: fix heap-over-flow ...

Check device having the feature of VIRTIO_CONSOLE_F_EMERG_WRITE before
get config->emerg_wr. It is neccessary because sizeof(virtio_console_config)
is 8 byte if VirtIOSerial doesn't have the feature of
VIRTIO_CONSOLE_F_EMERG_WRITE(see virtio_serial_device_realize),
read/write emerg_wr will lead to heap-over-flow.

Signed-off-by: linzhecheng <linzhecheng@huawei.com>
Reviewed-by: Stefan Hajnoczi <stefanha@redhat.com>
Reviewed-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>

2018-04-09 17:35:46 +03:00

..

bcm2835_aux.c

char: add backend hotswap handler

2017-07-14 11:04:33 +02:00

cadence_uart.c

maint: Fix macros with broken 'do/while(0); ' usage

2018-01-16 14:54:52 +01:00

cmsdk-apb-uart.c

hw/arm/mps2: Add UARTs

2017-07-17 13:36:08 +01:00

debugcon.c

misc: drop old i386 dependency

2017-12-18 17:07:03 +03:00

digic-uart.c

char: add backend hotswap handler

2017-07-14 11:04:33 +02:00

escc.c

hw/char: remove legacy interface escc_init()

2018-02-16 12:14:26 +11:00

etraxfs_ser.c

char: add backend hotswap handler

2017-07-14 11:04:33 +02:00

exynos4210_uart.c

char: avoid chardevice direct access

2017-07-14 11:04:33 +02:00

grlib_apbuart.c

char: avoid chardevice direct access

2017-07-14 11:04:33 +02:00

imx_serial.c

i.MX: Support serial RS-232 break properly

2018-03-23 18:26:45 +00:00

ipoctal232.c

char: avoid chardevice direct access

2017-07-14 11:04:33 +02:00

lm32_juart.c

char: add backend hotswap handler

2017-07-14 11:04:33 +02:00

lm32_uart.c

char: add backend hotswap handler

2017-07-14 11:04:33 +02:00

Makefile.objs

hw/isa: Move parallel_hds_isa_init() to hw/char/parallel-isa.c

2018-03-12 16:12:47 +01:00

mcf_uart.c

Include qapi/error.h exactly where needed

2018-02-09 13:50:17 +01:00

milkymist-uart.c

char: add backend hotswap handler

2017-07-14 11:04:33 +02:00

omap_uart.c

chardev: move headers to include/chardev

2017-06-02 11:33:52 +04:00

parallel-isa.c

hw/isa: Move parallel_hds_isa_init() to hw/char/parallel-isa.c

2018-03-12 16:12:47 +01:00

parallel.c

hw/isa: Move parallel_hds_isa_init() to hw/char/parallel-isa.c

2018-03-12 16:12:47 +01:00

pl011.c

char: add backend hotswap handler

2017-07-14 11:04:33 +02:00

sclpconsole-lm.c

s390x/sclp: clean up sclp masks

2018-03-08 15:49:23 +01:00

sclpconsole.c

s390x/sclp: clean up sclp masks

2018-03-08 15:49:23 +01:00

serial-isa.c

char: rename CharDriverState Chardev

2017-01-27 18:07:59 +01:00

serial-pci.c

pci: Add INTERFACE_CONVENTIONAL_PCI_DEVICE to Conventional PCI devices

2017-10-15 05:54:43 +03:00

serial.c

Enable 8-byte wide MMIO for 16550 serial devices

2017-11-06 17:15:14 +01:00

sh_serial.c

char: avoid chardevice direct access

2017-07-14 11:04:33 +02:00

spapr_vty.c

spapr: Implement bug in spapr-vty device to be compatible with PowerVM

2017-11-22 15:28:37 +11:00

stm32f2xx_usart.c

hw/char/stm32f2xx_usart: fix TXE/TC bit handling

2018-02-22 15:12:51 +00:00

terminal3270.c

chardev: introduce qemu_chr_timeout_add_ms()

2018-01-12 13:22:02 +01:00

trace-events

trace-events: fix code style: print 0x before hex numbers

2017-08-01 12:13:07 +01:00

virtio-console.c

Include less of the generated modular QAPI headers

2018-03-02 13:45:50 -06:00

virtio-serial-bus.c

virtio-serial: fix heap-over-flow

2018-04-09 17:35:46 +03:00

xen_console.c

misc: remove duplicated includes

2017-12-18 17:07:02 +03:00

xilinx_uartlite.c

char: add backend hotswap handler

2017-07-14 11:04:33 +02:00