You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
qemu/hw/acpi
Christian A. Ehrhardt defb70980f hw/acpi/erst.c: Fix memory handling issues
- Fix memset argument order: The second argument is
  the value, the length goes last.
- Fix an integer overflow reported by Alexander Bulekov.

Both issues allow the guest to overrun the host buffer
allocated for the ERST memory device.

Cc: Eric DeVolder <eric.devolder@oracle.com
Cc: Alexander Bulekov <alxndr@bu.edu>
Cc: qemu-stable@nongnu.org
Fixes: f7e26ffa59 ("ACPI ERST: support for ACPI ERST feature")
Tested-by: Alexander Bulekov <alxndr@bu.edu>
Signed-off-by: Christian A. Ehrhardt <lk@c--e.de>
Message-Id: <20221024154233.1043347-1-lk@c--e.de>
Fixes: https://gitlab.com/qemu-project/qemu/-/issues/1268
Reviewed-by: Alexander Bulekov <alxndr@bu.edu>
Reviewed-by: Eric DeVolder <eric.devolder@oracle.com>
Reviewed-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
2 years ago
..
Kconfig acpi/cxl: Add _OSC implementation (9.14.2) 3 years ago
acpi-cpu-hotplug-stub.c hw/acpi: refactor acpi hp modules so that targets can just use what they need 3 years ago
acpi-mem-hotplug-stub.c hw/acpi: refactor acpi hp modules so that targets can just use what they need 3 years ago
acpi-nvdimm-stub.c hw/acpi: refactor acpi hp modules so that targets can just use what they need 3 years ago
acpi-pci-hotplug-stub.c acpi: fix acpi_index migration 3 years ago
acpi-stub.c Include qmp-commands.h exactly where needed 7 years ago
acpi-x86-stub.c acpi: x86: set enabled when composing _MAT entries 3 years ago
acpi_interface.c acpi: add interface to build device specific AML 2 years ago
aml-build-stub.c acpi: pc: vga: use AcpiDevAmlIf interface to build VGA device descriptors 2 years ago
aml-build.c acpi: fadt: support revision 6.0 of the ACPI specification 2 years ago
bios-linker-loader.c Include qemu-common.h exactly where needed 6 years ago
core.c acpi: fix QEMU crash when started with SLIC table 3 years ago
cpu.c Remove unnecessary minimum_version_id_old fields 3 years ago
cpu_hotplug.c qom: Put name parameter before value / visitor parameter 4 years ago
cxl-stub.c acpi/cxl: Add _OSC implementation (9.14.2) 3 years ago
cxl.c hw/acpi/cxl: Pass in the CXLState directly rather than MachineState 2 years ago
erst.c hw/acpi/erst.c: Fix memory handling issues 2 years ago
generic_event_device.c hw/acpi: Add ospm_status hook implementation for acpi-ged 2 years ago
ghes-stub.c hw/acpi: Provide function acpi_ghes_present() 3 years ago
ghes.c Fix 'writeable' typos 2 years ago
hmat.c Use g_new() & friends where that makes obvious sense 3 years ago
hmat.h acpi: Permit OEM ID and OEM table ID fields to be changed 4 years ago
ich9.c Remove unnecessary minimum_version_id_old fields 3 years ago
ipmi-stub.c acpi: ipmi: use AcpiDevAmlIf interface to build IPMI device descriptors 2 years ago
ipmi.c acpi: ipmi: use AcpiDevAmlIf interface to build IPMI device descriptors 2 years ago
memory_hotplug.c hw/acpi/memory_hotplug: Remove unused 'hw/acpi/pc-hotplug.h' header 3 years ago
meson.build acpi: add interface to build device specific AML 2 years ago
nvdimm.c acpi/nvdimm: Implement ACPI NVDIMM Label Methods 2 years ago
pci.c acpi: build_mcfg: use acpi_table_begin()/acpi_table_end() instead of build_header() 3 years ago
pcihp.c hw/acpi: Make the PCI hot-plug aware of SR-IOV 2 years ago
piix4.c hw/acpi/piix4: remove unused piix4_pm_initfn() function 2 years ago
tco.c Remove unnecessary minimum_version_id_old fields 3 years ago
tpm.c docs: fix references to docs/specs/tpm.rst 4 years ago
trace-events acpi/nvdimm: Define trace events for NVDIMM and substitute nvdimm_debug() 2 years ago
trace.h trace: switch position of headers to what Meson requires 4 years ago
utils.c acpi: Set proper maximum size for "etc/acpi/rsdp" blob 4 years ago
viot.c hw/acpi/viot: sort VIOT ACPI table entries by PCI host bridge min_bus 2 years ago
viot.h hw/acpi: Add VIOT table 3 years ago
vmgenid.c acpi: vmgenid_build_acpi: use acpi_table_begin()/acpi_table_end() instead of build_header() 3 years ago