Eduardo Habkost ffa144b3af hostmem: Validate host-nodes before setting bitmap ...

host_memory_backend_set_host_nodes() was not validating
host-nodes before writing to backend->host_nodes, making QEMU
write beyond the end of the bitmap.

Fix the crash and add a simple regression test for the fix.

While at it, fix memory leak of the list returned by
visit_type_uint16List().

Reported-by: Markus Armbruster <armbru@redhat.com>
Signed-off-by: Eduardo Habkost <ehabkost@redhat.com>
Message-Id: <20181130122844.29103-1-ehabkost@redhat.com>
Reviewed-by: Stefano Garzarella <sgarzare@redhat.com>
Reviewed-by: David Hildenbrand <david@redhat.com>
Reviewed-by: Igor Mammedov <imammedo@redhat.com>
[ehabkost: removed test case code]
Signed-off-by: Eduardo Habkost <ehabkost@redhat.com>

2018-12-11 15:45:22 -02:00

..

cryptodev-builtin.c

cryptodev: add vhost support

2018-03-01 18:26:17 +02:00

cryptodev-vhost-user.c

backends/cryptodev: remove dead code

2018-07-30 14:00:11 +02:00

cryptodev-vhost.c

cryptodev: add vhost support

2018-03-01 18:26:17 +02:00

cryptodev.c

Include less of the generated modular QAPI headers

2018-03-02 13:45:50 -06:00

hostmem-file.c

hostmem-file: remove object id from pmem error message

2018-12-11 15:45:22 -02:00

hostmem-memfd.c

hostmem: no need to check for host_memory_backend_mr_inited() in alloc()

2018-11-28 11:51:24 +01:00

hostmem-ram.c

mem: add share parameter to memory-backend-ram

2018-02-19 13:03:24 +02:00

hostmem.c

hostmem: Validate host-nodes before setting bitmap

2018-12-11 15:45:22 -02:00

Makefile.objs

hostmem-file: make available memory-backend-file on POSIX-based hosts

2018-10-02 19:09:13 +02:00

rng-egd.c

char: add backend hotswap handler

2017-07-14 11:04:33 +02:00

rng-random.c

rng-random: rename RndRandom to RngRandom

2016-05-23 12:18:43 +05:30

rng.c

include/qemu/osdep.h: Don't include qapi/error.h

2016-03-22 22:20:15 +01:00

tpm.c

Drop superfluous includes of qapi/qmp/qerror.h

2018-02-09 13:51:35 +01:00