Prasad J Pandit 802cbcb730 ps2: check PS2Queue pointers in post_load routine ...

During Qemu guest migration, a destination process invokes ps2
post_load function. In that, if 'rptr' and 'count' values were
invalid, it could lead to OOB access or infinite loop issue.
Add check to avoid it.

Reported-by: Cyrille Chatras <cyrille.chatras@orange.com>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Message-id: 20171116075155.22378-1-ppandit@redhat.com
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>

2018-01-29 09:30:25 +01:00

..

adb-internal.h

Split adb.c into adb.c, adb-mouse.c and adb-kbd.c

2017-12-21 20:11:28 +01:00

adb-kbd.c

Split adb.c into adb.c, adb-mouse.c and adb-kbd.c

2017-12-21 20:11:28 +01:00

adb-mouse.c

Split adb.c into adb.c, adb-mouse.c and adb-kbd.c

2017-12-21 20:11:28 +01:00

adb.c

Split adb.c into adb.c, adb-mouse.c and adb-kbd.c

2017-12-21 20:11:28 +01:00

hid.c

hw/input/hid: Add support for several keys.

2017-12-18 17:07:02 +03:00

lm832x.c

Replace all occurances of __FUNCTION__ with __func__

2018-01-22 09:46:18 +01:00

Makefile.objs

Split adb.c into adb.c, adb-mouse.c and adb-kbd.c

2017-12-21 20:11:28 +01:00

milkymist-softusb.c

memory: Rename memory_region_init_ram() to memory_region_init_ram_nomigrate()

2017-07-14 17:59:42 +01:00

pckbd.c

shutdown: Add source information to SHUTDOWN and RESET

2017-05-23 13:28:17 +02:00

pl050.c

hw: explicitly include qemu/log.h

2016-05-19 16:42:29 +02:00

ps2.c

ps2: check PS2Queue pointers in post_load routine

2018-01-29 09:30:25 +01:00

pxa2xx_keypad.c

Replace all occurances of __FUNCTION__ with __func__

2018-01-22 09:46:18 +01:00

stellaris_input.c

arm: Clean up includes

2016-01-29 15:07:23 +00:00

trace-events

Split adb.c into adb.c, adb-mouse.c and adb-kbd.c

2017-12-21 20:11:28 +01:00

tsc210x.c

Replace all occurances of __FUNCTION__ with __func__

2018-01-22 09:46:18 +01:00

tsc2005.c

Replace all occurances of __FUNCTION__ with __func__

2018-01-22 09:46:18 +01:00

virtio-input-hid.c

input: virtio: don't send mouse wheel event twice

2018-01-29 09:30:25 +01:00

virtio-input-host.c

virtio-input: support absolute axis config in pass-through

2016-04-13 17:26:12 +02:00

virtio-input.c

virtio-input: fix eventq batching

2017-03-27 12:14:45 +02:00