Prasad J Pandit 77165a6be4 char: serial: check divider value against baud base ...

16550A UART device uses an oscillator to generate frequencies
(baud base), which decide communication speed. This speed could
be changed by dividing it by a divider. If the divider is
greater than the baud base, speed is set to zero, leading to a
divide by zero error. Add check to avoid it.

Reported-by: Huawei PSIRT <psirt@huawei.com>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Message-Id: <1476251888-20238-1-git-send-email-ppandit@redhat.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
(cherry picked from commit 3592fe0c91)
[BR: CVE-2016-8669 BSC#1004707]
Signed-off-by: Bruce Rogers <brogers@suse.com>

2021-03-17 09:45:50 -06:00

..

bcm2835_aux.c

bcm2835_aux: add emulation of BCM2835 AUX (aka UART1) block

2016-03-16 17:42:18 +00:00

cadence_uart.c

cadence_uart: bounds check write offset

2016-04-19 11:13:59 +01:00

debugcon.c

include/qemu/osdep.h: Don't include qapi/error.h

2016-03-22 22:20:15 +01:00

digic-uart.c

arm: Clean up includes

2016-01-29 15:07:23 +00:00

escc.c

qapi: Don't special-case simple union wrappers

2016-03-18 10:29:26 +01:00

etraxfs_ser.c

hw: Clean up includes

2016-01-29 15:07:25 +00:00

exynos4210_uart.c

arm: Clean up includes

2016-01-29 15:07:23 +00:00

grlib_apbuart.c

sparc: Clean up includes

2016-01-29 15:07:22 +00:00

imx_serial.c

arm: Clean up includes

2016-01-29 15:07:23 +00:00

ipoctal232.c

hw: Clean up includes

2016-01-29 15:07:25 +00:00

lm32_juart.c

lm32: Clean up includes

2016-01-29 15:07:22 +00:00

lm32_uart.c

lm32: Clean up includes

2016-01-29 15:07:22 +00:00

Makefile.objs

bcm2835_aux: add emulation of BCM2835 AUX (aka UART1) block

2016-03-16 17:42:18 +00:00

mcf_uart.c

hw: Clean up includes

2016-01-29 15:07:25 +00:00

milkymist-uart.c

lm32: Clean up includes

2016-01-29 15:07:22 +00:00

omap_uart.c

arm devices: Clean up includes

2016-01-29 15:07:25 +00:00

parallel.c

include/qemu/osdep.h: Don't include qapi/error.h

2016-03-22 22:20:15 +01:00

pl011.c

arm: Clean up includes

2016-01-29 15:07:23 +00:00

sclpconsole-lm.c

s390: Clean up includes

2016-01-29 15:07:22 +00:00

sclpconsole.c

s390: Clean up includes

2016-01-29 15:07:22 +00:00

serial-isa.c

include/qemu/osdep.h: Don't include qapi/error.h

2016-03-22 22:20:15 +01:00

serial-pci.c

include/qemu/osdep.h: Don't include qapi/error.h

2016-03-22 22:20:15 +01:00

serial.c

char: serial: check divider value against baud base

2021-03-17 09:45:50 -06:00

sh_serial.c

hw: Clean up includes

2016-01-29 15:07:25 +00:00

spapr_vty.c

hw: explicitly include qemu-common.h and cpu.h

2016-03-22 22:20:17 +01:00

stm32f2xx_usart.c

arm devices: Clean up includes

2016-01-29 15:07:25 +00:00

virtio-console.c

virtio: Clean up includes

2016-01-29 15:07:23 +00:00

virtio-serial-bus.c

include/qemu/osdep.h: Don't include qapi/error.h

2016-03-22 22:20:15 +01:00

xen_console.c

xen: Clean up includes

2016-01-29 15:07:23 +00:00

xilinx_uartlite.c

arm devices: Clean up includes

2016-01-29 15:07:25 +00:00