Prasad J Pandit 037f8c1b57 net: mcf: check receive buffer size register value ...

ColdFire Fast Ethernet Controller uses a receive buffer size
register(EMRBR) to hold maximum size of all receive buffers.
It is set by a user before any operation. If it was set to be
zero, ColdFire emulator would go into an infinite loop while
receiving data in mcf_fec_receive. Add check to avoid it.

Reported-by: Wjjzhang <wjjzhang@tencent.com>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Signed-off-by: Jason Wang <jasowang@redhat.com>
(cherry picked from commit 77d54985b8)
[BR: CVE-2016-9776 BSC#1013285]
Signed-off-by: Bruce Rogers <brogers@suse.com>

2021-03-17 09:45:50 -06:00

..

fsl_etsec

all: Clean up includes

2016-02-23 12:43:05 +00:00

rocker

net: rocker: set limit to DMA buffer size

2021-03-17 09:45:50 -06:00

allwinner_emac.c

arm: Clean up includes

2016-01-29 15:07:23 +00:00

cadence_gem.c

cadence_gem: fix buffer overflow

2016-02-04 13:22:06 +08:00

dp8393x.c

Replaced get_tick_per_sec() by NANOSECONDS_PER_SECOND

2016-03-22 22:20:17 +01:00

e1000_regs.h

e1000: Trivial implementation of various MAC registers

2015-11-12 15:26:53 +08:00

e1000.c

Revert "e1000: fix hang of win2k12 shutdown with flood ping"

2016-03-30 08:57:42 +08:00

eepro100.c

net: eepro100: fix memory leak in device uninit

2021-03-17 09:45:50 -06:00

etraxfs_eth.c

hw/net: Clean up includes

2016-01-29 15:07:23 +00:00

imx_fec.c

net: imx: limit buffer descriptor count

2021-03-17 09:45:50 -06:00

lan9118.c

hw/net: Clean up includes

2016-01-29 15:07:23 +00:00

lance.c

hw/net: Clean up includes

2016-01-29 15:07:23 +00:00

Makefile.objs

i.MX: Add FEC Ethernet Emulator

2015-09-07 10:39:30 +01:00

mcf_fec.c

net: mcf: check receive buffer size register value

2021-03-17 09:45:50 -06:00

milkymist-minimac2.c

hw: explicitly include qemu-common.h and cpu.h

2016-03-22 22:20:17 +01:00

mipsnet.c

net: mipsnet: check packet length against buffer

2016-08-09 14:28:45 -05:00

ne2000-isa.c

include/qemu/osdep.h: Don't include qapi/error.h

2016-03-22 22:20:15 +01:00

ne2000.c

net: ne2000: check ring buffer control registers

2016-03-08 15:34:09 +08:00

ne2000.h

ne2000: Drop ne2000_can_receive

2015-09-02 14:51:07 +01:00

opencores_eth.c

opencores_eth: indicate autonegotiation completion

2016-04-04 07:08:26 +03:00

pcnet-pci.c

hw/net: Clean up includes

2016-01-29 15:07:23 +00:00

pcnet.c

net: pcnet: check rx/tx descriptor ring length

2021-03-17 09:45:50 -06:00

pcnet.h

pcnet: Drop pcnet_can_receive

2015-07-27 14:12:18 +01:00

rtl8139.c

net: rtl8139: limit processing of ring descriptors

2021-03-17 09:45:50 -06:00

smc91c111.c

hw/net: Clean up includes

2016-01-29 15:07:23 +00:00

spapr_llan.c

Merge remote-tracking branch 'remotes/bonzini/tags/for-upstream' into staging

2016-03-24 21:42:40 +00:00

stellaris_enet.c

net: stellaris_enet: check packet length against receive buffer

2016-04-11 14:22:33 +01:00

vhost_net.c

vhost-user interrupt management fixes

2016-02-18 16:13:56 +02:00

virtio-net.c

virtio-net: mark VIRTIO_NET_F_GSO as legacy

2021-03-17 09:45:50 -06:00

vmware_utils.h

fpu: Replace uint8 typedef with uint8_t

2016-01-22 15:09:21 +00:00

vmxnet3.c

net: vmxnet: initialise local tx descriptor

2021-03-17 09:45:50 -06:00

vmxnet3.h

vmxnet3: Add support for VMXNET3_CMD_GET_ADAPTIVE_RING_INFO command

2015-10-12 13:19:29 +08:00

vmxnet_debug.h

net/vmxnet3: fix debug macro pattern for vmxnet3

2016-01-11 11:01:34 +08:00

vmxnet_rx_pkt.c

hw/net: Clean up includes

2016-01-29 15:07:23 +00:00

vmxnet_rx_pkt.h

Clean up includes some more

2016-03-22 22:20:16 +01:00

vmxnet_tx_pkt.c

net: vmxnet: use g_new for pkt initialisation

2016-09-08 15:29:37 -05:00

vmxnet_tx_pkt.h

Clean up includes some more

2016-03-22 22:20:16 +01:00

xen_nic.c

xen: Clean up includes

2016-01-29 15:07:23 +00:00

xgmac.c

arm: Clean up includes

2016-01-29 15:07:23 +00:00

xilinx_axienet.c

include/qemu/osdep.h: Don't include qapi/error.h

2016-03-22 22:20:15 +01:00

xilinx_ethlite.c

hw/net: Fix a heap overflow in xlnx.xps-ethernetlite

2021-03-17 09:45:50 -06:00