[Qemu-commits] [qemu/qemu] 0c0fc2: audio: intel-hda: check stream entry count during ...

[GitHub]

  Branch: refs/heads/master
  Home:   https://github.com/qemu/qemu
  Commit: 0c0fc2b5fd534786051889459848764edd798050
      
https://github.com/qemu/qemu/commit/0c0fc2b5fd534786051889459848764edd798050
  Author: Prasad J Pandit <address@hidden>
  Date:   2016-10-26 (Wed, 26 Oct 2016)

  Changed paths:
    M hw/audio/intel-hda.c

  Log Message:
  -----------
  audio: intel-hda: check stream entry count during transfer

Intel HDA emulator uses stream of buffers during DMA data
transfers. Each entry has buffer length and buffer pointer
position, which are used to derive bytes to 'copy'. If this
length and buffer pointer were to be same, 'copy' could be
set to zero(0), leading to an infinite loop. Add check to
avoid it.

Reported-by: Huawei PSIRT <address@hidden>
Signed-off-by: Prasad J Pandit <address@hidden>
Reviewed-by: Stefan Hajnoczi <address@hidden>
Message-id: address@hidden
Signed-off-by: Gerd Hoffmann <address@hidden>


  Commit: 835f3d24b42fcbeca5c49048994a4e5d0fe905c5
      
https://github.com/qemu/qemu/commit/835f3d24b42fcbeca5c49048994a4e5d0fe905c5
  Author: Peter Maydell <address@hidden>
  Date:   2016-10-27 (Thu, 27 Oct 2016)

  Changed paths:
    M hw/audio/intel-hda.c

  Log Message:
  -----------
  Merge remote-tracking branch 'remotes/kraxel/tags/pull-audio-20161027-1' into 
staging

audio: intel-hda: check stream entry count during transfer

# gpg: Signature made Thu 27 Oct 2016 15:30:51 BST
# gpg:                using RSA key 0x4CB6D8EED3E87138
# gpg: Good signature from "Gerd Hoffmann (work) <address@hidden>"
# gpg:                 aka "Gerd Hoffmann <address@hidden>"
# gpg:                 aka "Gerd Hoffmann (private) <address@hidden>"
# Primary key fingerprint: A032 8CFF B93A 17A7 9901  FE7D 4CB6 D8EE D3E8 7138

* remotes/kraxel/tags/pull-audio-20161027-1:
  audio: intel-hda: check stream entry count during transfer

Signed-off-by: Peter Maydell <address@hidden>


Compare: https://github.com/qemu/qemu/compare/5929d7e8a0e1...835f3d24b42f