| commit | 84218892f05515d20347fde4506e1944eb11cb25 | |
| author | Mauro Matteo Cascella <mcascell@redhat.com> | |
| Tue, 5 Jul 2022 17:47:34 +0000 (5 19:47 +0200) | ||
| committer | Gerd Hoffmann <kraxel@redhat.com> | |
| Tue, 19 Jul 2022 12:36:38 +0000 (19 14:36 +0200) | ||
| tree | 526f4dd30851f4acd3238923ed16a1ad4cd0eb91 | treesnapshot (tar.gz zip) |
| parent | 3ef1497b46c57eba151fb1d0bdd8c8bff8a0f524 | commitdiff |
usb/hcd-xhci: check slotid in xhci_wakeup_endpoint()
This prevents an OOB read (followed by an assertion failure in
xhci_kick_ep) when slotid > xhci->numslots.
Reported-by: Soul Chen <soulchen8650@gmail.com>
Signed-off-by: Mauro Matteo Cascella <mcascell@redhat.com>
Message-Id: <20220705174734.2348829-1-mcascell@redhat.com>
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
This prevents an OOB read (followed by an assertion failure in
xhci_kick_ep) when slotid > xhci->numslots.
Reported-by: Soul Chen <soulchen8650@gmail.com>
Signed-off-by: Mauro Matteo Cascella <mcascell@redhat.com>
Message-Id: <20220705174734.2348829-1-mcascell@redhat.com>
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
| hw/usb/hcd-xhci.c | diffblobblamehistory |