dfaggioli/qemu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
edafba3921da2ceb1097dfbe47d6eaaf1963566c
qemu/hw/char
History
Philippe Mathieu-Daudé fbeb0a160c hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs 
Replace qemu_bh_new_guarded() by virtio_bh_new_guarded()
so the bus and device use the same guard. Otherwise the
DMA-reentrancy protection can be bypassed.

Fixes: CVE-2024-3446
Cc: qemu-stable@nongnu.org
Suggested-by: Alexander Bulekov <alxndr@bu.edu>
Reviewed-by: Gerd Hoffmann <kraxel@redhat.com>
Acked-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Philippe Mathieu-Daudé <philmd@linaro.org>
Reviewed-by: Michael S. Tsirkin <mst@redhat.com>
Message-Id: <20240409105537.18308-4-philmd@linaro.org>
(cherry picked from commit b4295bff25)
Signed-off-by: Michael Tokarev <mjt@tls.msk.ru>
2024-04-10 20:32:12 +03:00
..
avr_usart.c
qdev: Move softmmu properties to qdev-properties-system.h
2020-12-18 15:20:17 -05:00
bcm2835_aux.c
qdev: Move softmmu properties to qdev-properties-system.h
2020-12-18 15:20:17 -05:00
cadence_uart.c
hw/other: spelling fixes
2023-09-21 11:31:16 +03:00
cmsdk-apb-uart.c
hw/char: Have FEWatchFunc handlers return G_SOURCE_CONTINUE/REMOVE
2023-08-31 19:47:43 +02:00
debugcon.c
qdev: Move softmmu properties to qdev-properties-system.h
2020-12-18 15:20:17 -05:00
digic-uart.c
bulk: Rename TARGET_FMT_plx -> HWADDR_FMT_plx
2023-01-18 11:14:34 +01:00
escc.c
ui/input: Constify QemuInputHandler structure
2023-10-19 23:13:28 +02:00
etraxfs_ser.c
bulk: Rename TARGET_FMT_plx -> HWADDR_FMT_plx
2023-01-18 11:14:34 +01:00
exynos4210_uart.c
Drop useless casts from g_malloc() & friends to pointer
2022-10-22 23:15:40 +02:00
goldfish_tty.c
hw/m68k: Fix typo in SPDX tag
2021-11-09 10:11:27 +01:00
grlib_apbuart.c
qdev: Move softmmu properties to qdev-properties-system.h
2020-12-18 15:20:17 -05:00
ibex_uart.c
hw/char: Have FEWatchFunc handlers return G_SOURCE_CONTINUE/REMOVE
2023-08-31 19:47:43 +02:00
imx_serial.c
hw/other: spelling fixes
2023-09-21 11:31:16 +03:00
ipoctal232.c
qdev: Move softmmu properties to qdev-properties-system.h
2020-12-18 15:20:17 -05:00
Kconfig
hw/char: Add config for shakti uart
2021-09-01 11:59:12 +10:00
mcf_uart.c
hw/char/mcf_uart: Have mcf_uart_create() return DeviceState
2023-11-01 07:31:05 +01:00
mchp_pfsoc_mmuart.c
hw/char/mchp_pfsoc_mmuart: QOM'ify PolarFire MMUART
2021-10-07 08:41:33 +10:00
meson.build
meson: Replace softmmu_ss -> system_ss
2023-06-20 10:01:30 +02:00
nrf51_uart.c
hw/char: Have FEWatchFunc handlers return G_SOURCE_CONTINUE/REMOVE
2023-08-31 19:47:43 +02:00
omap_uart.c
hw/arm/omap: Remove unused omap_uart_attach()
2023-06-05 07:43:23 +01:00
parallel-isa.c
hw/char/parallel-isa: Export struct ISAParallelState
2023-06-13 11:28:58 +02:00
parallel.c
hw/char/parallel-isa: Export struct ISAParallelState
2023-06-13 11:28:58 +02:00
pl011.c
hw/char/pl011: Replace magic values by register field definitions
2023-08-31 19:47:43 +02:00
renesas_sci.c
qdev: Move softmmu properties to qdev-properties-system.h
2020-12-18 15:20:17 -05:00
riscv_htif.c
hw/char: riscv_htif: replace exit calls with proper shutdown
2023-10-12 12:35:36 +10:00
sclpconsole-lm.c
qdev: Move softmmu properties to qdev-properties-system.h
2020-12-18 15:20:17 -05:00
sclpconsole.c
qdev: Move softmmu properties to qdev-properties-system.h
2020-12-18 15:20:17 -05:00
serial-isa.c
acpi: serial-is: replace ISADeviceClass::build_aml with AcpiDevAmlIfClass:build_dev_aml
2022-06-09 19:32:48 -04:00
serial-pci-multi.c
docs/specs: Convert pci-serial.txt to rst
2023-04-24 22:56:55 -04:00
serial-pci.c
docs/specs: Convert pci-serial.txt to rst
2023-04-24 22:56:55 -04:00
serial.c
hw/other: spelling fixes
2023-09-21 11:31:16 +03:00
sh_serial.c
hw/char/sh_serial: Add device id to trace output
2021-10-30 18:39:37 +02:00
shakti_uart.c
hw/char: shakti_uart: Register device in 'input' category
2021-10-07 08:41:33 +10:00
sifive_uart.c
cleanup: Tweak and re-run return_directly.cocci
2022-12-14 16:19:35 +01:00
spapr_vty.c
Do not include cpu.h if it's not really necessary
2021-05-02 17:24:51 +02:00
stm32f2xx_usart.c
hw/char/stm32f2xx_usart: Update IRQ when DR is written
2023-11-02 13:36:45 +00:00
terminal3270.c
s390x: css: report errors from ccw_dstream_read/write
2021-04-09 10:52:13 +02:00
trace-events
hw/xen: update Xen console to XenDevice model
2023-11-07 08:54:20 +00:00
trace.h
trace: switch position of headers to what Meson requires
2020-08-21 06:18:24 -04:00
virtio-console.c
hw/char: Have FEWatchFunc handlers return G_SOURCE_CONTINUE/REMOVE
2023-08-31 19:47:43 +02:00
virtio-serial-bus.c
hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs
2024-04-10 20:32:12 +03:00
xen_console.c
hw/xen: add support for Xen primary console in emulated mode
2023-11-07 08:54:20 +00:00
xilinx_uartlite.c
hw/char/xilinx_uartlite: Expose XILINX_UARTLITE QOM type
2023-02-27 13:27:05 +00:00