From patchwork Tue Mar 26 17:09:05 2013 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Cornelia Huck X-Patchwork-Id: 231481 Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Received: from lists.gnu.org (lists.gnu.org [208.118.235.17]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (Client did not present a certificate) by ozlabs.org (Postfix) with ESMTPS id 2AB932C009F for ; Wed, 27 Mar 2013 04:09:56 +1100 (EST) Received: from localhost ([::1]:33195 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1UKXNf-0008I8-Uk for incoming@patchwork.ozlabs.org; Tue, 26 Mar 2013 13:09:51 -0400 Received: from eggs.gnu.org ([208.118.235.92]:32849) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1UKXNC-0008EP-Pv for qemu-devel@nongnu.org; Tue, 26 Mar 2013 13:09:24 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1UKXN8-0007RD-Oc for qemu-devel@nongnu.org; Tue, 26 Mar 2013 13:09:22 -0400 Received: from e06smtp15.uk.ibm.com ([195.75.94.111]:59650) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1UKXN8-0007Qa-G5 for qemu-devel@nongnu.org; Tue, 26 Mar 2013 13:09:18 -0400 Received: from /spool/local by e06smtp15.uk.ibm.com with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted for from ; Tue, 26 Mar 2013 17:06:43 -0000 Received: from d06dlp03.portsmouth.uk.ibm.com (9.149.20.15) by e06smtp15.uk.ibm.com (192.168.101.145) with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted; Tue, 26 Mar 2013 17:06:42 -0000 Received: from b06cxnps4076.portsmouth.uk.ibm.com (d06relay13.portsmouth.uk.ibm.com [9.149.109.198]) by d06dlp03.portsmouth.uk.ibm.com (Postfix) with ESMTP id 69AB31B08069 for ; Tue, 26 Mar 2013 17:09:13 +0000 (GMT) Received: from d06av10.portsmouth.uk.ibm.com (d06av10.portsmouth.uk.ibm.com [9.149.37.251]) by b06cxnps4076.portsmouth.uk.ibm.com (8.13.8/8.13.8/NCO v10.0) with ESMTP id r2QH935X47579144 for ; Tue, 26 Mar 2013 17:09:03 GMT Received: from d06av10.portsmouth.uk.ibm.com (loopback [127.0.0.1]) by d06av10.portsmouth.uk.ibm.com (8.14.4/8.13.1/NCO v10.0 AVout) with ESMTP id r2QFmY8g015728 for ; Tue, 26 Mar 2013 11:48:35 -0400 Received: from gondolin.boeblingen.de.ibm.com (dyn-9-152-224-122.boeblingen.de.ibm.com [9.152.224.122]) by d06av10.portsmouth.uk.ibm.com (8.14.4/8.13.1/NCO v10.0 AVin) with ESMTP id r2QFmXWN015615; Tue, 26 Mar 2013 11:48:33 -0400 From: Cornelia Huck To: qemu-devel Date: Tue, 26 Mar 2013 18:09:05 +0100 Message-Id: <1364317746-19166-1-git-send-email-cornelia.huck@de.ibm.com> X-Mailer: git-send-email 1.7.9.5 X-TM-AS-MML: No X-Content-Scanned: Fidelis XPS MAILER x-cbid: 13032617-0342-0000-0000-0000048FF616 X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.4.x-2.6.x [generic] X-Received-From: 195.75.94.111 Cc: Blue Swirl , Anthony Liguori , Alexander Graf , =?UTF-8?q?Aur=C3=A9lien=20Jarno?= Subject: [Qemu-devel] [PATCH] [PULL] virtio-ccw fix. X-BeenThere: qemu-devel@nongnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: qemu-devel-bounces+incoming=patchwork.ozlabs.org@nongnu.org Sender: qemu-devel-bounces+incoming=patchwork.ozlabs.org@nongnu.org The ccw notify hypercall handler was missing a sanity check for the queue number, making it possible for an ill-behaving caller to crash qemu. Not good. Please pull. The following changes since commit e769bdc26ded6d7681cddd9f67c5f87a4b5ba53c: hw/qdev: Abort rather than ignoring errors adding device properties (2013-03-26 09:27:02 -0500) are available in the git repository at: git://github.com/cohuck/qemu virtio-ccw-upstr for you to fetch changes up to b57ed9bf075e33cdd2f9eb545ff555301dd57221: virtio-ccw: Queue sanity check for notify hypercall. (2013-03-26 18:04:24 +0100) ---------------------------------------------------------------- Cornelia Huck (1): virtio-ccw: Queue sanity check for notify hypercall. hw/s390x/s390-virtio-ccw.c | 3 +++ 1 file changed, 3 insertions(+)