Searched hist:"9 bd6565ccee68f72d5012e24646e12a1c662827e" (Results 1 – 1 of 1) sorted by relevance
| /openbmc/qemu/hw/acpi/ |
| H A D | pcihp.c | diff 9bd6565ccee68f72d5012e24646e12a1c662827e Tue Dec 21 08:45:44 CST 2021 Michael S. Tsirkin <mst@redhat.com> acpi: validate hotplug selector on access
When bus is looked up on a pci write, we didn't
validate that the lookup succeeded.
Fuzzers thus can trigger QEMU crash by dereferencing the NULL
bus pointer.
Fixes: b32bd763a1 ("pci: introduce acpi-index property for PCI device")
Fixes: CVE-2021-4158
Cc: "Igor Mammedov" <imammedo@redhat.com>
Fixes: https://gitlab.com/qemu-project/qemu/-/issues/770
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Reviewed-by: Philippe Mathieu-Daudé <philmd@redhat.com>
Reviewed-by: Ani Sinha <ani@anisinha.ca>
|