Christian A. Ehrhardt ebcc922dc9 hw/acpi/erst.c: Fix memory handling issues ...

- Fix memset argument order: The second argument is
  the value, the length goes last.
- Fix an integer overflow reported by Alexander Bulekov.

Both issues allow the guest to overrun the host buffer
allocated for the ERST memory device.

Cc: Eric DeVolder <eric.devolder@oracle.com
Cc: Alexander Bulekov <alxndr@bu.edu>
Cc: qemu-stable@nongnu.org
Fixes: f7e26ffa59 ("ACPI ERST: support for ACPI ERST feature")
Tested-by: Alexander Bulekov <alxndr@bu.edu>
Signed-off-by: Christian A. Ehrhardt <lk@c--e.de>
Message-Id: <20221024154233.1043347-1-lk@c--e.de>
Fixes: https://gitlab.com/qemu-project/qemu/-/issues/1268
Reviewed-by: Alexander Bulekov <alxndr@bu.edu>
Reviewed-by: Eric DeVolder <eric.devolder@oracle.com>
Reviewed-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
(cherry picked from commit defb70980f)
Resolves: bsc#1205847
Signed-off-by: Dario Faggioli <dfaggioli@suse.com>

2023-06-01 15:46:50 +02:00

..

acpi_interface.c

acpi: add interface to build device specific AML

2022-06-09 19:32:48 -04:00

acpi-cpu-hotplug-stub.c

hw/acpi: refactor acpi hp modules so that targets can just use what they need

2021-09-04 09:07:46 -04:00

acpi-mem-hotplug-stub.c

hw/acpi: refactor acpi hp modules so that targets can just use what they need

2021-09-04 09:07:46 -04:00

acpi-nvdimm-stub.c

hw/acpi: refactor acpi hp modules so that targets can just use what they need

2021-09-04 09:07:46 -04:00

acpi-pci-hotplug-stub.c

acpi: fix acpi_index migration

2022-04-06 20:03:26 +01:00

acpi-stub.c

Include qmp-commands.h exactly where needed

2018-02-09 13:52:10 +01:00

acpi-x86-stub.c

acpi: x86: set enabled when composing _MAT entries

2021-10-05 17:30:57 -04:00

aml-build-stub.c

acpi: add aml builder stubs

2020-10-21 11:36:19 +02:00

aml-build.c

hw/acpi/aml-build: Use existing CPU topology to build PPTT table

2022-05-09 11:47:55 +01:00

bios-linker-loader.c

Include qemu-common.h exactly where needed

2019-06-12 13:20:20 +02:00

core.c

acpi: fix QEMU crash when started with SLIC table

2022-01-07 19:30:13 -05:00

cpu_hotplug.c

qom: Put name parameter before value / visitor parameter

2020-07-10 15:18:08 +02:00

cpu.c

Remove unnecessary minimum_version_id_old fields

2022-01-28 15:38:23 +01:00

cxl-stub.c

acpi/cxl: Add _OSC implementation (9.14.2)

2022-05-13 06:13:36 -04:00

cxl.c

hw/acpi/cxl: Pass in the CXLState directly rather than MachineState

2022-06-09 19:32:49 -04:00

erst.c

hw/acpi/erst.c: Fix memory handling issues

2023-06-01 15:46:50 +02:00

generic_event_device.c

acpi/ged: fix reset cause

2021-07-03 03:12:35 -04:00

ghes-stub.c

hw/acpi: Provide function acpi_ghes_present()

2021-06-21 16:49:37 +01:00

ghes.c

Fix 'writeable' typos

2022-06-08 19:38:47 +01:00

hmat.c

Use g_new() & friends where that makes obvious sense

2022-03-21 15:44:44 +01:00

hmat.h

acpi: Permit OEM ID and OEM table ID fields to be changed

2021-02-05 08:52:59 -05:00

ich9.c

Remove unnecessary minimum_version_id_old fields

2022-01-28 15:38:23 +01:00

ipmi-stub.c

acpi: ipmi: use AcpiDevAmlIf interface to build IPMI device descriptors

2022-06-09 19:32:49 -04:00

ipmi.c

acpi: ipmi: use AcpiDevAmlIf interface to build IPMI device descriptors

2022-06-09 19:32:49 -04:00

Kconfig

acpi/cxl: Add _OSC implementation (9.14.2)

2022-05-13 06:13:36 -04:00

memory_hotplug.c

hw/acpi/memory_hotplug: Remove unused 'hw/acpi/pc-hotplug.h' header

2022-02-21 10:18:06 +01:00

meson.build

acpi: add interface to build device specific AML

2022-06-09 19:32:48 -04:00

nvdimm.c

acpi/nvdimm: Define trace events for NVDIMM and substitute nvdimm_debug()

2022-07-26 10:37:46 -04:00

pci.c

acpi: build_mcfg: use acpi_table_begin()/acpi_table_end() instead of build_header()

2021-10-05 17:30:57 -04:00

pcihp.c

hw/acpi: Make the PCI hot-plug aware of SR-IOV

2022-06-23 23:24:29 +02:00

piix4.c

hw/acpi/piix4: remove unused piix4_pm_initfn() function

2022-06-11 11:44:47 +02:00

tco.c

Remove unnecessary minimum_version_id_old fields

2022-01-28 15:38:23 +01:00

tpm.c

docs: fix references to docs/specs/tpm.rst

2021-06-02 06:51:09 +02:00

trace-events

acpi/nvdimm: Define trace events for NVDIMM and substitute nvdimm_debug()

2022-07-26 10:37:46 -04:00

trace.h

trace: switch position of headers to what Meson requires

2020-08-21 06:18:24 -04:00

utils.c

acpi: Set proper maximum size for "etc/acpi/rsdp" blob

2021-03-22 18:58:19 -04:00

viot.c

hw/acpi/viot: sort VIOT ACPI table entries by PCI host bridge min_bus

2022-06-09 19:32:49 -04:00

viot.h

hw/acpi: Add VIOT table

2021-11-01 18:49:10 -04:00

vmgenid.c

acpi: vmgenid_build_acpi: use acpi_table_begin()/acpi_table_end() instead of build_header()

2021-10-05 17:30:57 -04:00