[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[PATCH 0/3] hw/sd/sdhci: Fix DMA Transfer Block Size field width
From: |
Philippe Mathieu-Daudé |
Subject: |
[PATCH 0/3] hw/sd/sdhci: Fix DMA Transfer Block Size field width |
Date: |
Tue, 1 Sep 2020 16:01:24 +0200 |
Fix the SDHCI issue reported last week by Alexander:
https://bugs.launchpad.net/qemu/+bug/1892960
The field is 12-bit (4KiB) but the guest can set
up to 16-bit (64KiB), leading to OOB access.
Philippe Mathieu-Daudé (3):
hw/sd/sdhci: Fix qemu_log_mask() format string
hw/sd/sdhci: Document the datasheet used
hw/sd/sdhci: Fix DMA Transfer Block Size field
hw/sd/sdhci.c | 6 ++++--
1 file changed, 4 insertions(+), 2 deletions(-)
--
2.26.2
- [PATCH 0/3] hw/sd/sdhci: Fix DMA Transfer Block Size field width,
Philippe Mathieu-Daudé <=