chaojianhu a0d1cbdacf hw/net: Fix a heap overflow in xlnx.xps-ethernetlite ...

The .receive callback of xlnx.xps-ethernetlite doesn't check the length
of data before calling memcpy. As a result, the NetClientState object in
heap will be overflowed. All versions of qemu with xlnx.xps-ethernetlite
will be affected.

Reported-by: chaojianhu <chaojianhu@hotmail.com>
Signed-off-by: chaojianhu <chaojianhu@hotmail.com>
Signed-off-by: Jason Wang <jasowang@redhat.com>

2016-08-09 15:27:18 +08:00

..

9pfs

9pfs: Wrap in vmstate

2016-07-21 20:44:20 +03:00

acpi

opts-visitor: Favor new visit_free() function

2016-07-06 10:52:04 +02:00

alpha

hw/alpha: fix PCI bus initialization

2016-07-20 19:30:26 +03:00

arm

qapi: Change Netdev into a flat union

2016-07-19 20:18:02 +02:00

audio

Clean up decorations and whitespace around header guards

2016-07-12 16:20:46 +02:00

block

Merge remote-tracking branch 'remotes/kevin/tags/for-upstream' into staging

2016-08-05 13:05:29 +01:00

bt

hw/bt: Don't use cpu_to_*w() and *_to_cpup()

2016-07-12 15:08:53 +01:00

char

virtio-serial: Wrap in vmstate

2016-07-21 20:44:20 +03:00

core

block/qdev: Let 'drive' property fall back to node name

2016-08-08 13:05:43 +02:00

cpu

cpu: Abstract CPU core type

2016-06-17 16:33:48 +10:00

cris

cris: Fix broken header guard in hw/cris/boot.h

2016-07-12 16:20:46 +02:00

display

hw/virtio-pci: fix virtio behaviour

2016-07-29 00:07:10 +03:00

dma

dma: Add Xilinx Zynq devcfg device model

2016-07-04 13:15:22 +01:00

gpio

hw/gpio: QOM'ify zaurus.c

2016-06-14 15:59:13 +01:00

i2c

i2c: fix migration regression introduced by broadcast support

2016-08-03 18:44:56 +02:00

i386

error: Fix error_printf() calls lacking newlines

2016-08-08 09:01:27 +02:00

ide

Merge remote-tracking branch 'remotes/elmarco/tags/leaks-for-2.7-pull-request' into staging

2016-08-08 12:41:38 +01:00

input

virtio-input: free config list

2016-08-08 00:00:28 +04:00

intc

x86: ioapic: add support for explicit EOI

2016-08-03 18:44:57 +02:00

ipack

ipack: Update e-mail address

2016-05-18 15:04:27 +03:00

ipmi

hw/ipmi: fix spelling

2016-06-07 18:02:48 +03:00

isa

ich9: implement SCI_IRQ_SEL register

2016-06-29 14:03:48 +02:00

lm32

Clean up decorations and whitespace around header guards

2016-07-12 16:20:46 +02:00

m68k

hw: explicitly include qemu-common.h and cpu.h

2016-03-22 22:20:17 +01:00

mem

nvdimm: fix memory leak in error code path

2016-07-20 19:30:26 +03:00

microblaze

Clean up ill-advised or unusual header guards

2016-07-12 16:20:46 +02:00

mips

error: Strip trailing '\n' from error string arguments (again)

2016-08-08 09:00:44 +02:00

misc

kvm-irqchip: do explicit commit when update irq

2016-07-21 20:44:19 +03:00

moxie

hw: explicitly include qemu-common.h and cpu.h

2016-03-22 22:20:17 +01:00

net

hw/net: Fix a heap overflow in xlnx.xps-ethernetlite

2016-08-09 15:27:18 +08:00

nvram

error: Strip trailing '\n' from error string arguments (again)

2016-08-08 09:00:44 +02:00

openrisc

hw: explicitly include qemu-common.h and cpu.h

2016-03-22 22:20:17 +01:00

pci

pcie: fix link active status bit migration

2016-07-29 00:07:08 +03:00

pci-bridge

hw/pci-bridge: Convert pxb initialization functions to Error

2016-07-29 00:07:09 +03:00

pci-host

apb: convert init to realize

2016-07-29 00:07:09 +03:00

pcmcia

hw: Clean up includes

2016-01-29 15:07:25 +00:00

ppc

Merge remote-tracking branch 'remotes/armbru/tags/pull-error-2016-08-08' into staging

2016-08-08 13:25:35 +01:00

s390x

s390x/pci: fix null pointer bug

2016-08-08 12:47:02 +02:00

scsi

mptsas: really fix migration compatibility

2016-08-03 18:44:56 +02:00

sd

ssi: change ssi_slave_init to be a realize ops

2016-07-04 13:15:22 +01:00

sh4

Clean up ill-advised or unusual header guards

2016-07-12 16:20:46 +02:00

smbios

ipmi: Add SMBIOS table entry

2016-06-24 05:13:57 +03:00

sparc

hw/sparc/leon3: Don't call get_image_size() on a NULL pointer

2016-08-08 13:58:42 +01:00

sparc64

util: move declarations out of qemu-common.h

2016-03-22 22:20:17 +01:00

ssi

ast2400: pretend DMAs are done for U-boot

2016-07-14 16:51:38 +01:00

timer

Merge remote-tracking branch 'remotes/lalrae/tags/mips-20160712' into staging

2016-07-12 12:34:41 +01:00

tpm

Clean up header guards that don't match their file name

2016-07-12 16:19:16 +02:00

tricore

hw: explicitly include qemu-common.h and cpu.h

2016-03-22 22:20:17 +01:00

unicore32

hw: explicitly include qemu-common.h and cpu.h

2016-03-22 22:20:17 +01:00

usb

usb: free leaking path

2016-08-08 00:00:36 +04:00

vfio

vfio: Use error_report() instead of error_printf() for errors

2016-08-08 09:01:18 +02:00

virtio

Merge remote-tracking branch 'remotes/mst/tags/for_upstream' into staging

2016-07-29 11:57:01 +01:00

watchdog

nmi: remove x86 specific nmi handling

2016-05-23 16:53:46 +02:00

xen

Xen PCI passthrough: fix passthrough failure when no interrupt pin

2016-08-04 10:42:48 -07:00

xenpv

xen: use a common function for pv and hvm guest backend register calls

2016-08-03 14:52:11 +02:00

xtensa

target-xtensa: xtfpga: fix FLASH interface width

2016-07-14 13:59:44 +03:00

Makefile.objs

Add a base IPMI interface

2015-12-22 18:39:19 +02:00