Alexander Bulekov 9b139d24f0 hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446) ...

This protects devices from bh->mmio reentrancy issues.

Thanks: Thomas Huth <thuth@redhat.com> for diagnosing OS X test failure.
Signed-off-by: Alexander Bulekov <alxndr@bu.edu>
Reviewed-by: Darren Kenny <darren.kenny@oracle.com>
Reviewed-by: Stefan Hajnoczi <stefanha@redhat.com>
Reviewed-by: Michael S. Tsirkin <mst@redhat.com>
Reviewed-by: Paul Durrant <paul@xen.org>
Reviewed-by: Thomas Huth <thuth@redhat.com>
Message-Id: <20230427211013.2994127-5-alxndr@bu.edu>
Signed-off-by: Thomas Huth <thuth@redhat.com>
(cherry picked from commit f63192b054)
References: bsc#1222843
Signed-off-by: Dario Faggioli <dfaggioli@suse.com>

2024-04-16 18:46:10 +02:00

..

emulation.c

scsi-generic: avoid invalid access to struct when emulating block limits

2018-11-06 21:35:06 +01:00

esp-pci.c

pci: Let pci_dma_rw() take MemTxAttrs argument

2021-12-31 01:05:23 +01:00

esp.c

esp: restrict non-DMA transfer length to that of available data

2024-03-19 09:00:14 +01:00

Kconfig

build: move vhost-scsi configuration to Kconfig

2022-05-07 07:46:58 +02:00

lsi53c895a.c

hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330)

2023-07-26 15:34:39 +02:00

megasas.c

hw/scsi/megasas: check for NULL frame in megasas_command_cancelled()

2023-06-01 15:46:49 +02:00

meson.build

meson: convert hw/scsi

2020-08-21 06:30:28 -04:00

mfi.h

Fix 'writeable' typos

2022-06-08 19:38:47 +01:00

mpi.h

hw: Add support for LSI SAS1068 (mptsas) device

2016-02-09 15:45:26 +01:00

mptconfig.c

nomaintainer: Fix Lesser GPL version number

2020-11-15 17:04:40 +01:00

mptendian.c

nomaintainer: Fix Lesser GPL version number

2020-11-15 17:04:40 +01:00

mptsas.c

hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)

2024-04-16 18:46:10 +02:00

mptsas.h

mptsas: Remove unused MPTSASState 'pending' field (CVE-2021-3392)

2021-04-19 15:48:12 +01:00

scsi-bus.c

hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)

2024-04-16 18:46:10 +02:00

scsi-disk.c

scsi-disk: ensure block size is non-zero and changes limited to bits 8-15

2022-08-01 15:22:39 +02:00

scsi-generic.c

scsi-generic: check for additional SG_IO status on completion

2023-06-01 15:46:49 +02:00

spapr_vscsi.c

Trivial: 3 char repeat typos

2022-06-28 11:06:02 +02:00

srp.h

spapr-vscsi: add task management

2013-09-12 08:46:21 +02:00

trace-events

scsi-disk: allow MODE SELECT block descriptor to set the block size

2022-07-13 16:58:58 +02:00

trace.h

trace: switch position of headers to what Meson requires

2020-08-21 06:18:24 -04:00

vhost-scsi-common.c

vhost-scsi: support inflight io track

2020-09-30 19:09:20 +02:00

vhost-scsi.c

virtio: add vhost support for virtio devices

2022-05-16 04:38:40 -04:00

vhost-user-scsi.c

hw/vhost-user-scsi|blk: set supports_config flag correctly

2022-06-09 19:32:49 -04:00

viosrp.h

hw/scsi/spapr_vscsi: Do not mix SRP IU size with DMA buffer size

2020-03-17 15:08:50 +11:00

virtio-scsi-dataplane.c

virtio-scsi: fix race in virtio_scsi_dataplane_start()

2022-08-17 07:07:37 -04:00

virtio-scsi.c

virtio: drop name parameter for virtio_init()

2022-05-16 04:38:40 -04:00

vmw_pvscsi.c

hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)

2024-04-16 18:46:10 +02:00

vmw_pvscsi.h

scsi: VMWare PVSCSI paravirtual device implementation

2013-04-19 10:44:17 +02:00