diff options
author | Kevin Wolf <kwolf@redhat.com> | 2011-07-04 14:07:50 +0200 |
---|---|---|
committer | Kevin Wolf <kwolf@redhat.com> | 2011-07-05 11:23:42 +0200 |
commit | 40c4ed3f95f0b2ffa0848df0fc311556bb7472a1 (patch) | |
tree | d2f03e334df959dbcfa037867e38b2b1f2552cfb /qemu-io.c | |
parent | e7ff8f0e0c03853c5018d683b28b338b9738588a (diff) |
ide: Ignore reads during PIO in and writes during PIO out
This fixes https://bugs.launchpad.net/qemu/+bug/786209:
When the DRQ_STAT bit is set, the IDE core permits both data reads
and data writes, regardless of whether the current transfer was
initiated as a read or write.
This potentially leaks uninitialized host memory into the guest,
if, before doing anything else to an IDE device, the guest begins a
write transaction (e.g. WIN_WRITE), but then *reads* from the IO
port instead of writing to it.
Signed-off-by: Kevin Wolf <kwolf@redhat.com>
Reviewed-by: Markus Armbruster <armbru@redhat.com>
Diffstat (limited to 'qemu-io.c')
0 files changed, 0 insertions, 0 deletions