| commit | f265ae8c79ce8c194de481e9def1daa3a80dbb96 | |
| author | Alistair Francis <alistair.francis@xilinx.com> | |
| Mon, 27 Jun 2016 14:37:32 +0000 (27 15:37 +0100) | ||
| committer | Peter Maydell <peter.maydell@linaro.org> | |
| Mon, 27 Jun 2016 14:37:32 +0000 (27 15:37 +0100) | ||
| tree | 29d38fee3b74d00b5a8652d75a57af742f4a9703 | treesnapshot (tar.gz zip) |
| parent | f6cf41932edf260c2574346a08358ad2d20c357e | commitdiff |
cadence_gem: Avoid infinite loops with a misconfigured buffer
A guest can write zero to the DMACFG resulting in an infinite loop when
it reaches the while(bytes_to_copy) loop.
To avoid this issue enforce a minimum size for the RX buffer. Hardware
does not have this enforcement and relies on the guest to set a non-zero
value.
Signed-off-by: Alistair Francis <alistair.francis@xilinx.com>
Reported-by: Li Qiang <liqiang6-s@360.cn>
Reported-by: P J P <ppandit@redhat.com>
Message-id: 84bb1c391b833275da3f573d4972920cea34c188.1466539342.git.alistair.francis@xilinx.com
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
A guest can write zero to the DMACFG resulting in an infinite loop when
it reaches the while(bytes_to_copy) loop.
To avoid this issue enforce a minimum size for the RX buffer. Hardware
does not have this enforcement and relies on the guest to set a non-zero
value.
Signed-off-by: Alistair Francis <alistair.francis@xilinx.com>
Reported-by: Li Qiang <liqiang6-s@360.cn>
Reported-by: P J P <ppandit@redhat.com>
Message-id: 84bb1c391b833275da3f573d4972920cea34c188.1466539342.git.alistair.francis@xilinx.com
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
| hw/net/cadence_gem.c | diffblobblamehistory |