falso
/
qemu-irix
mirror of https://github.com/n64decomp/qemu-irix.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
qemu-irix/hw
History
Laszlo Ersek 192d2f4cc7 scsi_target_send_command(): amend stable-1.6 port of the CVE-2013-4344 fix 
The originally suggested fix for CVE-2013-4344 introduced a regression in
scsi_target_send_command() / REQUEST_SENSE; the third argument passed to
scsi_device_get_sense() -- for the "len" parameter -- ignored the
possibility of the guest SCSI driver requesting truncated (or shorter than
full) sense data.

This could result in (r->len > req->cmd.xfer) on return, which is not
valid SCSI.

The problem was addressed in the second round, and the commit on the
master branch (84642435) is correct. However the stable-1.6 branch (the
v1.6.1 release) has the original, regressive fix (commit fdcbe7d5); let's
update it.

Signed-off-by: Laszlo Ersek <lersek@redhat.com>
Reviewed-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Michael Roth <mdroth@linux.vnet.ibm.com>
 		2013-12-09 14:49:49 -06:00
..
9pfs virtio-9p-device: Avoid freeing uninitialized memory 2013-08-01 11:18:24 -05:00
acpi qemu: Adjust qemu wakeup 2013-10-01 10:50:35 -05:00
alpha target-alpha: Move alarm to vm_clock 2013-07-18 06:44:55 -07:00
arm pxa2xx: Avoid object_get_link_property() assertion for "parent_bus" 2013-08-05 11:46:58 -05:00
audio adlib: sort offsets in portio registration 2013-09-24 22:11:51 -05:00
block xen_disk: mark ioreq as mapped before unmapping in error case 2013-12-03 14:07:20 -06:00
bt sysemu: avoid proliferation of include/ subdirectories 2013-04-15 18:19:25 +02:00
char pseries: Fix stalls on hypervisor virtual console 2013-09-24 19:23:18 -05:00
core Bugfix for loading multiboot kernels 2013-08-07 12:46:40 -05:00
cpu arm11mpcore: QOM cast cleanups for mpcore_rirq_state 2013-07-29 20:44:02 +02:00
cris memory: add owner argument to initialization functions 2013-07-04 17:42:44 +02:00
display qxl: fix local renderer 2013-09-24 22:46:18 -05:00
dma sun4m_iommu: QOM cast cleanup 2013-07-29 21:06:46 +02:00
gpio gpio/zaurus: QOM cast cleanup 2013-07-29 21:06:57 +02:00
i2c exynos4210_i2c: QOM cast cleanup 2013-07-29 21:07:02 +02:00
i386 kvmvapic: Clear also physical ROM address when entering INACTIVE state 2013-09-24 22:54:39 -05:00
ide ide: Introduce abstract QOM type for PCIIDEState 2013-07-29 20:41:49 +02:00
input pl050: QOM'ify pl050_keyboard and pl050_mouse 2013-07-29 21:06:57 +02:00
intc ioapic: QOM cast cleanup 2013-07-29 21:07:02 +02:00
isa i82378: Cleanup implementation 2013-07-31 23:25:41 +02:00
lm32 lm32_juart: QOM cast cleanup 2013-07-29 21:06:28 +02:00
m68k memory: add owner argument to initialization functions 2013-07-04 17:42:44 +02:00
microblaze microblaze: Fix latent bug with default DTB lookup 2013-07-09 13:38:58 -05:00
mips mips_malta: do not raise exceptions when accessing invalid memory 2013-08-14 16:47:30 +02:00
misc vfio-pci: Release all MSI-X vectors when disabled 2013-12-09 11:40:30 -06:00
moxie memory: add owner argument to initialization functions 2013-07-04 17:42:44 +02:00
net virtio-net: fix the memory leak in rxfilter_notify() 2013-12-09 11:40:30 -06:00
nvram fw_cfg: the I/O port variant expects little-endian 2013-08-07 12:48:15 -05:00
openrisc hw/openrisc: Use stderr output instead of qemu_log 2013-07-23 18:31:24 +08:00
pci pci: unregister vmstate_pcibus on unplug 2013-12-09 11:40:30 -06:00
pci-bridge i82801b11: Fix i82801b11 PCI host bridge config space 2013-08-12 12:07:12 +03:00
pci-host Fix pc migration from qemu <= 1.5 2013-12-09 11:40:20 -06:00
ppc spapr: Rename 'dprintf' to 'DPRINTF' 2013-07-29 19:56:46 -05:00
s390x s390x: Rename 'dprintf' to 'DPRINTF' 2013-07-29 19:33:54 -05:00
scsi scsi_target_send_command(): amend stable-1.6 port of the CVE-2013-4344 fix 2013-12-09 14:49:49 -06:00
sd pl181: QOM cast cleanup 2013-07-29 21:07:00 +02:00
sh4 sh4: unbreak r2d 2013-07-25 08:12:27 -05:00
sparc sun4m: QOM cast cleanup for RamDevice 2013-07-29 21:07:00 +02:00
sparc64 sun4u: QOM cast cleanup for RamDevice 2013-07-29 21:07:00 +02:00
ssi xilinx_spi: QOM cast cleanup 2013-07-29 21:07:01 +02:00
timer xilinx_timer: QOM cast cleanup 2013-07-29 21:07:02 +02:00
tpm hw/t*: pass owner to memory_region_init* functions 2013-07-04 17:42:48 +02:00
unicore32 memory: add owner argument to initialization functions 2013-07-04 17:42:44 +02:00
usb xhci: emulate intr endpoint intervals correctly 2013-09-25 15:33:02 -05:00
virtio virtio_pci: fix level interrupts with irqfd 2013-09-24 22:16:54 -05:00
watchdog devices: Associate devices to their logical category 2013-07-29 10:37:09 -05:00
xen devices: Associate devices to their logical category 2013-07-29 10:37:09 -05:00
xtensa cpu: Turn cpu_get_phys_page_debug() into a CPUClass hook 2013-07-23 02:41:33 +02:00
Makefile.objs virtio: simplify Makefile conditionals 2013-04-19 16:18:11 +02:00