P J P d0a3c9b8a2 dma: rc4030: limit interval timer reload value ...

The JAZZ RC4030 chipset emulator has a periodic timer and
associated interval reload register. The reload value is used
as divider when computing timer's next tick value. If reload
value is large, it could lead to divide by zero error. Limit
the interval reload value to avoid it.

Reported-by: Huawei PSIRT <psirt@huawei.com>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
[BR: CVE-2016-8667 BSC#1004702]
Signed-off-by: Bruce Rogers <brogers@suse.com>

2021-03-17 09:45:50 -06:00

..

bcm2835_dma.c

include/qemu/osdep.h: Don't include qapi/error.h

2016-03-22 22:20:15 +01:00

etraxfs_dma.c

etraxfs_dma: Dont forward zero-length payload to clients

2016-02-20 00:17:48 +01:00

i8257.c

isa: Move DMA_transfer_handler from qemu-common.h to hw/isa/isa.h

2016-03-22 22:20:16 +01:00

i82374.c

i8257: pass ISA bus to DMA_init() function

2016-02-03 11:28:55 -05:00

Makefile.objs

bcm2835_dma: add emulation of Raspberry Pi DMA controller

2016-03-16 17:42:18 +00:00

omap_dma.c

arm devices: Clean up includes

2016-01-29 15:07:25 +00:00

pl080.c

arm: Clean up includes

2016-01-29 15:07:23 +00:00

pl330.c

include/qemu/osdep.h: Don't include qapi/error.h

2016-03-22 22:20:15 +01:00

puv3_dma.c

unicore: Clean up includes

2016-01-29 15:07:22 +00:00

pxa2xx_dma.c

arm: Clean up includes

2016-01-29 15:07:23 +00:00

rc4030.c

dma: rc4030: limit interval timer reload value

2021-03-17 09:45:50 -06:00

soc_dma.c

hw: Clean up includes

2016-01-29 15:07:25 +00:00

sparc32_dma.c

hw: Clean up includes

2016-01-29 15:07:25 +00:00

sun4m_iommu.c

hw: Clean up includes

2016-01-29 15:07:25 +00:00

xilinx_axidma.c

include/qemu/osdep.h: Don't include qapi/error.h

2016-03-22 22:20:15 +01:00