Skip to content
Snippets Groups Projects
Commit 156a2e4d authored by Gerd Hoffmann's avatar Gerd Hoffmann
Browse files

ehci: make idt processing more robust


Make ehci_process_itd return an error in case we didn't do any actual
iso transfer because we've found no active transaction.  That'll avoid
ehci happily run in circles forever if the guest builds a loop out of
idts.

This is CVE-2015-8558.

Cc: qemu-stable@nongnu.org
Reported-by: default avatarQinghao Tang <luodalongde@gmail.com>
Tested-by: default avatarP J P <ppandit@redhat.com>
Signed-off-by: default avatarGerd Hoffmann <kraxel@redhat.com>
parent 93d592e3
No related branches found
No related tags found
No related merge requests found
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment