Prasad J Pandit d6c3768b32 hw/display/tc6393xb: limit irq handler index to TC6393XB_GPIOS
The ctz32() routine could return a value greater than
TC6393XB_GPIOS=16, because the device has 24 GPIO level
bits but we only implement 16 outgoing lines. This could
lead to an OOB array access. Mask 'level' to avoid it.

Reported-by: Moguofang <moguofang@huawei.com>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Message-id: 20171212041539.25700-1-ppandit@redhat.com
Reviewed-by: Peter Maydell <peter.maydell@linaro.org>
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
2017-12-13 17:59:26 +00:00
..
2016-10-04 13:28:07 +01:00
2017-08-02 18:30:13 -03:00
2017-10-27 16:03:54 +02:00
2017-12-13 17:59:26 +00:00
2017-10-15 05:54:40 +03:00
2016-01-29 15:07:25 +00:00
2017-09-27 11:35:59 +01:00
2017-11-05 14:52:10 +01:00
2017-08-30 18:23:25 +02:00