[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[PATCH v2 0/3] hw/sd/sdhci: Fix DMA Transfer Block Size field width
From: |
Philippe Mathieu-Daudé |
Subject: |
[PATCH v2 0/3] hw/sd/sdhci: Fix DMA Transfer Block Size field width |
Date: |
Tue, 1 Sep 2020 16:04:08 +0200 |
Fix the SDHCI issue reported last week by Alexander:
https://bugs.launchpad.net/qemu/+bug/1892960
The field is 12-bit (4KiB) but the guest can set
up to 16-bit (64KiB), leading to OOB access.
since v1:
commited unstaged change in patch #3...
Philippe Mathieu-Daudé (3):
hw/sd/sdhci: Fix qemu_log_mask() format string
hw/sd/sdhci: Document the datasheet used
hw/sd/sdhci: Fix DMA Transfer Block Size field
hw/sd/sdhci.c | 6 ++++--
1 file changed, 4 insertions(+), 2 deletions(-)
--
2.26.2
- [PATCH v2 0/3] hw/sd/sdhci: Fix DMA Transfer Block Size field width,
Philippe Mathieu-Daudé <=
- [PATCH v2 1/3] hw/sd/sdhci: Fix qemu_log_mask() format string, Philippe Mathieu-Daudé, 2020/09/01
- [PATCH v2 3/3] hw/sd/sdhci: Fix DMA Transfer Block Size field, Philippe Mathieu-Daudé, 2020/09/01
- [PATCH v2 2/3] hw/sd/sdhci: Document the datasheet used, Philippe Mathieu-Daudé, 2020/09/01
- Re: [PATCH v2 0/3] hw/sd/sdhci: Fix DMA Transfer Block Size field width, Alexander Bulekov, 2020/09/10
- Re: [PATCH v2 0/3] hw/sd/sdhci: Fix DMA Transfer Block Size field width, Philippe Mathieu-Daudé, 2020/09/18