Skip to content
Snippets Groups Projects
  1. Oct 09, 2020
  2. Sep 23, 2020
  3. Sep 17, 2020
  4. Sep 09, 2020
  5. Aug 21, 2020
  6. Jul 13, 2020
    • Volker Rümelin's avatar
      ossaudio: fix out of bounds write · 4f50d4a4
      Volker Rümelin authored
      
      In function oss_read() a read error currently does not exit the
      read loop. With no data to read the variable pos will quickly
      underflow and a subsequent successful read overwrites memory
      outside the buffer. This patch adds the missing break statement
      to the error path of the function.
      
      To reproduce start qemu with -audiodev oss,id=audio0 and in the
      guest start audio recording. After some time this will trigger
      an exception.
      
      Fixes: 3ba4066d "ossaudio: port to the new audio backend api"
      
      Signed-off-by: default avatarVolker Rümelin <vr_qemu@t-online.de>
      Message-id: 20200707180836.5435-1-vr_qemu@t-online.de
      Signed-off-by: default avatarGerd Hoffmann <kraxel@redhat.com>
      4f50d4a4
  7. Jul 10, 2020
  8. Jun 17, 2020
  9. May 26, 2020
  10. May 25, 2020
  11. Apr 06, 2020
  12. Mar 16, 2020
  13. Feb 18, 2020
  14. Feb 06, 2020
  15. Jan 31, 2020
Loading