diff options
| author | Philippe Mathieu-Daudé <philmd@redhat.com> | 2021-11-24 17:15:36 +0100 |
|---|---|---|
| committer | John Snow <jsnow@redhat.com> | 2021-12-02 01:09:38 -0500 |
| commit | cc20926e9b8077bff6813efc8dcdeae90d1a3b10 (patch) | |
| tree | 794167714b258376097fa0eb90e6a8d2904fae92 /scripts/simplebench/bench-example.py | |
| parent | 1ab95af033a419e7a64e2d58e67dd96b20af5233 (diff) | |
tests/qtest/fdc-test: Add a regression test for CVE-2021-20196
Without the previous commit, when running 'make check-qtest-i386'
with QEMU configured with '--enable-sanitizers' we get:
AddressSanitizer:DEADLYSIGNAL
=================================================================
==287878==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000344
==287878==The signal is caused by a WRITE memory access.
==287878==Hint: address points to the zero page.
#0 0x564b2e5bac27 in blk_inc_in_flight block/block-backend.c:1346:5
#1 0x564b2e5bb228 in blk_pwritev_part block/block-backend.c:1317:5
#2 0x564b2e5bcd57 in blk_pwrite block/block-backend.c:1498:11
#3 0x564b2ca1cdd3 in fdctrl_write_data hw/block/fdc.c:2221:17
#4 0x564b2ca1b2f7 in fdctrl_write hw/block/fdc.c:829:9
#5 0x564b2dc49503 in portio_write softmmu/ioport.c:201:9
Add the reproducer for CVE-2021-20196.
Suggested-by: Alexander Bulekov <alxndr@bu.edu>
Reviewed-by: Darren Kenny <darren.kenny@oracle.com>
Signed-off-by: Philippe Mathieu-Daudé <philmd@redhat.com>
Message-id: 20211124161536.631563-4-philmd@redhat.com
Signed-off-by: John Snow <jsnow@redhat.com>
Diffstat (limited to 'scripts/simplebench/bench-example.py')
0 files changed, 0 insertions, 0 deletions