Searched hist:bea2a9e3 (Results 1 – 1 of 1) sorted by relevance
| /openbmc/qemu/hw/usb/ |
| H A D | hcd-dwc2.c | bea2a9e3 Thu Oct 15 02:59:57 CDT 2020 Mauro Matteo Cascella <mcascell@redhat.com> hw/usb/hcd-dwc2: fix divide-by-zero in dwc2_handle_packet()
Check the value of mps to avoid potential divide-by-zero later in the function.
Since HCCHAR_MPS is guest controllable, this prevents a malicious/buggy guest
from crashing the QEMU process on the host.
Signed-off-by: Mauro Matteo Cascella <mcascell@redhat.com>
Reviewed-by: Paul Zimmerman <pauldzim@gmail.com>
Reported-by: Gaoning Pan <gaoning.pgn@antgroup.com>
Reported-by: Xingwei Lin <linyi.lxw@antfin.com>
Message-id: 20201015075957.268823-1-mcascell@redhat.com
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
|