Xuzhou Cheng 90865af7d9 hw/pci-host: pnv_phb{3, 4}: Fix heap out-of-bound access failure ...

pnv_phb3_root_bus_info and pnv_phb4_root_bus_info are missing the
instance_size initialization. This results in accessing out-of-bound
memory when setting 'chip-id' and 'phb-id', and eventually crashes
glib's malloc functionality with the following message:

  "qemu-system-ppc64: GLib: ../glib-2.72.3/glib/gmem.c:131: failed to allocate 3232 bytes"

This issue was noticed only when running qtests with QEMU Windows
32-bit executable. Windows 64-bit, Linux 32/64-bit do not expose
this bug though.

Fixes: 9ae1329ee2fe ("ppc/pnv: Add models for POWER8 PHB3 PCIe Host bridge")
Fixes: 4f9924c4d4cf ("ppc/pnv: Add models for POWER9 PHB4 PCIe Host bridge")
Reviewed-by: Cédric Le Goater <clg@kaod.org>
Signed-off-by: Xuzhou Cheng <xuzhou.cheng@windriver.com>
Signed-off-by: Bin Meng <bin.meng@windriver.com>
Message-Id: <20220920103159.1865256-29-bmeng.cn@gmail.com>
Signed-off-by: Daniel Henrique Barboza <danielhb413@gmail.com>

2022-09-20 12:31:53 -03:00

..

bonito.c

hw/pci-host/bonito: Allow PCI config accesses smaller than 32-bit

2021-07-02 17:34:55 +02:00

designware.c

pci-host: designware: add pcie-msi read method

2021-02-08 15:15:32 +01:00

dino.c

dino: move from hw/hppa to hw/pci-host

2022-05-08 18:52:36 +01:00

gpex-acpi.c

hw/pci-host/gpex-acpi: Add support for dsdt construction for pxb-cxl

2022-05-13 07:57:26 -04:00

gpex.c

hw/pci-host/gpex: Don't fault for unmapped parts of MMIO and PIO windows

2021-04-30 11:16:52 +01:00

grackle.c

grackle: use qdev gpios for PCI IRQs

2020-10-18 16:21:42 +01:00

i440fx.c

i386/pc: create pci-host qdev prior to pc_memory_init()

2022-07-26 10:40:58 -04:00

Kconfig

dino: move from hw/hppa to hw/pci-host

2022-05-08 18:52:36 +01:00

meson.build

ppc/pnv: add PnvPHB base/proxy device

2022-08-31 14:08:05 -03:00

mv643xx.h

hw/pci-host: Add emulation of Marvell MV64361 PPC system controller

2021-05-04 11:41:25 +10:00

mv64361.c

Remove qemu-common.h include from most units

2022-04-06 14:31:55 +02:00

pam.c

hw/pci-host/pam: Replace magic number by PAM_REGIONS_COUNT definition

2020-12-13 17:07:05 +01:00

pnv_phb3_msi.c

Remove qemu-common.h include from most units

2022-04-06 14:31:55 +02:00

pnv_phb3_pbcq.c

Remove qemu-common.h include from most units

2022-04-06 14:31:55 +02:00

pnv_phb3.c

hw/pci-host: pnv_phb{3, 4}: Fix heap out-of-bound access failure

2022-09-20 12:31:53 -03:00

pnv_phb4_pec.c

ppc/pnv: enable user created pnv-phb for powernv9

2022-08-31 14:08:06 -03:00

pnv_phb4.c

hw/pci-host: pnv_phb{3, 4}: Fix heap out-of-bound access failure

2022-09-20 12:31:53 -03:00

pnv_phb.c

ppc/pnv: fix QOM parenting of user creatable root ports

2022-08-31 14:08:06 -03:00

pnv_phb.h

ppc/pnv: add pnv-phb-root-port device

2022-08-31 14:08:05 -03:00

ppce500.c

Do not include exec/address-spaces.h if it's not really necessary

2021-05-02 17:24:51 +02:00

q35.c

q35：Enable TSEG only when G_SMRAME and TSEG_EN both enabled

2022-06-15 11:11:37 +02:00

raven.c

Remove qemu-common.h include from most units

2022-04-06 14:31:55 +02:00

remote.c

Remove qemu-common.h include from most units

2022-04-06 14:31:55 +02:00

sabre.c

Do not include exec/address-spaces.h if it's not really necessary

2021-05-02 17:24:51 +02:00

sh_pci.c

hw/sh4: Coding style: White space fixes

2021-10-30 11:46:40 +02:00

trace-events

dino: move from hw/hppa to hw/pci-host

2022-05-08 18:52:36 +01:00

trace.h

trace: switch position of headers to what Meson requires

2020-08-21 06:18:24 -04:00

uninorth.c

hw: Use the PCI_DEVFN() macro from 'hw/pci/pci.h'

2021-01-04 23:24:44 +01:00

versatile.c

pci: Rename pci_root_bus_new_inplace() to pci_root_bus_init()

2021-09-30 13:42:10 +01:00

xen_igd_pt.c

xen: Use ERRP_GUARD()

2020-07-10 15:18:09 +02:00

xilinx-pcie.c

hw/mips/boston: Fix Lesser GPL version number

2020-11-03 16:51:13 +01:00