Stefan Weil 68716da745 apb: Fix out-of-bounds array write access ...

The array regs is declared with IOMMU_NREGS (3) elements and accessed
using IOMMU_CTRL (0) and IOMMU_BASE (8). In most cases, those values
are right shifted before being used as an index which results in indices
0 and 1. In one case, this right shift was missing for IOMMU_BASE which
results in an out-of-bounds write access with index 8.

The patch adds the missing shift operation also for IOMMU_CTRL where
it is needed only for cosmetic reasons.

Signed-off-by: Stefan Weil <sw@weilnetz.de>
Signed-off-by: Mark Cave-Ayland <mark.cave-ayland@ilande.co.uk>

2014-06-20 23:52:49 +01:00

..

apb.c

apb: Fix out-of-bounds array write access

2014-06-20 23:52:49 +01:00

bonito.c

savevm: Remove all the unneeded version_minimum_id_old (rest)

2014-05-14 15:24:51 +02:00

grackle.c

pci-host: Consistently set cannot_instantiate_with_device_add_yet

2013-12-23 00:27:23 +01:00

Makefile.objs

dec.c - move to pci-bridge

2013-06-02 18:13:37 +03:00

pam.c

pam: partly fix write-only mode

2014-03-09 21:09:38 +02:00

piix.c

savevm: Remove all the unneeded version_minimum_id_old (x86)

2014-06-16 04:55:26 +02:00

ppce500.c

hw/pci-host/ppce500: Fix typo in vmstate definition

2014-06-16 13:24:41 +02:00

prep.c

hw/pci-host/prep: Don't reverse IO accesses on bigendian hosts

2014-04-08 18:37:45 +01:00

q35.c

savevm: Remove all the unneeded version_minimum_id_old (x86)

2014-06-16 04:55:26 +02:00

uninorth.c

pci-host: Consistently set cannot_instantiate_with_device_add_yet

2013-12-23 00:27:23 +01:00

versatile.c

pci-host: Consistently set cannot_instantiate_with_device_add_yet

2013-12-23 00:27:23 +01:00