diff options
author | Peter Maydell <peter.maydell@linaro.org> | 2014-02-26 17:19:57 +0000 |
---|---|---|
committer | Peter Maydell <peter.maydell@linaro.org> | 2014-02-26 17:19:57 +0000 |
commit | ec1efab95767312ff4afb816d0d4b548e093b031 (patch) | |
tree | 1e9223fb627f164f7be8badbb33e3559c6330b1e /hw/cpu | |
parent | d5001cf787ad0514839a81d0f2e771e01e076e21 (diff) |
hw/misc/arm_sysctl: Fix bad boundary check on mb clock accesses
Fix incorrect use of sizeof() rather than ARRAY_SIZE() to guard
accesses into the mb_clock[] array, which was allowing a malicious
guest to overwrite the end of the array.
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
Reviewed-by: Paolo Bonzini <pbonzini@redhat.com>
Reviewed-by: Andreas Färber <afaerber@suse.de>
Message-id: 1392647854-8067-2-git-send-email-peter.maydell@linaro.org
Cc: qemu-stable@nongnu.org
Diffstat (limited to 'hw/cpu')
0 files changed, 0 insertions, 0 deletions