Show patches with: Submitter = Mauro Matteo Cascella       |    Archived = No       |   36 patches
Patch Series A/F/R/T S/W/F Date Submitter Delegate State
ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) - 2 1 1 --- 2023-07-04 Mauro Matteo Cascella New
[v2] ui/cursor: make width/height unsigned 16-bit integer [v2] ui/cursor: make width/height unsigned 16-bit integer - - 2 - --- 2023-05-23 Mauro Matteo Cascella New
[v2] virtio-crypto: fix NULL pointer dereference in virtio_crypto_free_request [v2] virtio-crypto: fix NULL pointer dereference in virtio_crypto_free_request - 1 1 - --- 2023-05-09 Mauro Matteo Cascella New
virtio-crypto: fix NULL pointer dereference in virtio_crypto_free_request virtio-crypto: fix NULL pointer dereference in virtio_crypto_free_request - 1 - - --- 2023-05-08 Mauro Matteo Cascella New
ui/cursor: incomplete check for integer overflow in cursor_alloc ui/cursor: incomplete check for integer overflow in cursor_alloc - 2 2 - --- 2023-05-08 Mauro Matteo Cascella New
usb/dev-wacom: fix OOB write in usb_mouse_poll() usb/dev-wacom: fix OOB write in usb_mouse_poll() - - - 1 --- 2023-02-13 Mauro Matteo Cascella New
scsi/lsi53c895a: restrict DMA engine to memory regions (CVE-2023-0330) scsi/lsi53c895a: restrict DMA engine to memory regions (CVE-2023-0330) - 1 - - --- 2023-01-16 Mauro Matteo Cascella New
nubus-device: fix memory leak in nubus_device_realize nubus-device: fix memory leak in nubus_device_realize - 1 2 - --- 2022-12-22 Mauro Matteo Cascella New
hw/sd/sdhci: reset data count in sdhci_buff_access_is_sequential() hw/sd/sdhci: reset data count in sdhci_buff_access_is_sequential() - 1 - - --- 2022-11-07 Mauro Matteo Cascella New
hw/sd/sdhci: further prohibit DMA accesses to devices hw/sd/sdhci: further prohibit DMA accesses to devices - - - - --- 2022-10-28 Mauro Matteo Cascella New
ui/vnc-clipboard: fix integer underflow in vnc_client_cut_text_ext ui/vnc-clipboard: fix integer underflow in vnc_client_cut_text_ext - 2 - - --- 2022-09-25 Mauro Matteo Cascella New
qtest/fuzz-lsi53c895a-test: set guest RAM to 2G qtest/fuzz-lsi53c895a-test: set guest RAM to 2G - - 1 1 --- 2022-09-02 Mauro Matteo Cascella New
[v2] scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) [v2] scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) - 1 - 1 --- 2022-07-11 Mauro Matteo Cascella New
scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) - 1 1 - --- 2022-07-05 Mauro Matteo Cascella New
usb/hcd-xhci: check slotid in xhci_wakeup_endpoint() usb/hcd-xhci: check slotid in xhci_wakeup_endpoint() - - - - --- 2022-07-05 Mauro Matteo Cascella New
hw/net/rocker: avoid NULL pointer dereference in of_dpa_cmd_add_l2_flood hw/net/rocker: avoid NULL pointer dereference in of_dpa_cmd_add_l2_flood - - - - --- 2022-06-24 Mauro Matteo Cascella New
[v3] ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) [v3] ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) - 1 1 - --- 2022-04-07 Mauro Matteo Cascella New
[v2] display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) [v2] display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) - 1 1 - --- 2022-04-07 Mauro Matteo Cascella New
[v2] ui/cursor: fix integer overflow in cursor_alloc (CVE-2022-4206) [v2] ui/cursor: fix integer overflow in cursor_alloc (CVE-2022-4206) - 1 - - --- 2022-04-06 Mauro Matteo Cascella New
display/qxl-render: fix race condition in qxl_cursor (CVE-2022-4207) display/qxl-render: fix race condition in qxl_cursor (CVE-2022-4207) - 1 2 - --- 2022-04-05 Mauro Matteo Cascella New
ui/cursor: fix integer overflow in cursor_alloc (CVE-2022-4206) ui/cursor: fix integer overflow in cursor_alloc (CVE-2022-4206) - 1 - - --- 2022-04-05 Mauro Matteo Cascella New
hw/scsi/scsi-disk: MODE_PAGE_ALLS not allowed in MODE SELECT commands hw/scsi/scsi-disk: MODE_PAGE_ALLS not allowed in MODE SELECT commands - 1 - - --- 2021-11-05 Mauro Matteo Cascella New
[v2] Test comment for git-publish [v2] Test comment for git-publish - - - - --- 2021-06-11 Mauro Matteo Cascella New
Test comment for git-publish Test comment for git-publish - - - - --- 2021-06-11 Mauro Matteo Cascella New
ui/spice-display: check NULL pointer in interface_release_resource() ui/spice-display: check NULL pointer in interface_release_resource() - - 1 - --- 2021-05-20 Mauro Matteo Cascella New
hw/scsi/megasas: check for NULL frame in megasas_command_cancelled() hw/scsi/megasas: check for NULL frame in megasas_command_cancelled() - - - - --- 2020-12-24 Mauro Matteo Cascella New
hw/net/dp8393x: fix integer underflow in dp8393x_do_transmit_packets() hw/net/dp8393x: fix integer underflow in dp8393x_do_transmit_packets() 1 - - - --- 2020-11-24 Mauro Matteo Cascella New
[v2] net/e1000e_core: adjust count if RDH exceeds RDT in e1000e_ring_advance() [v2] net/e1000e_core: adjust count if RDH exceeds RDT in e1000e_ring_advance() - - - 1 --- 2020-11-13 Mauro Matteo Cascella New
net/e1000e_core: make sure RDH never exceeds RDT in e1000e_ring_advance() net/e1000e_core: make sure RDH never exceeds RDT in e1000e_ring_advance() - - - 1 --- 2020-11-05 Mauro Matteo Cascella New
[v2] hw/usb/hcd-dwc2: fix divide-by-zero in dwc2_handle_packet() [v2] hw/usb/hcd-dwc2: fix divide-by-zero in dwc2_handle_packet() - - 1 1 --- 2020-10-15 Mauro Matteo Cascella New
hw/usb/hcd-dwc2: fix divide-by-zero in dwc2_handle_packet() hw/usb/hcd-dwc2: fix divide-by-zero in dwc2_handle_packet() - - 1 - --- 2020-10-12 Mauro Matteo Cascella New
[v2] hw/net/net_tx_pkt: fix assertion failure in net_tx_pkt_add_raw_fragment() [v2] hw/net/net_tx_pkt: fix assertion failure in net_tx_pkt_add_raw_fragment() - - 1 - --- 2020-08-01 Mauro Matteo Cascella New
[2/2] hw/net: check max_raw_frags in e1000e and vmxnet3 devices assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c - - - - --- 2020-07-27 Mauro Matteo Cascella New
[1/2] hw/net/net_tx_pkt: add function to check pkt->max_raw_frags assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c - - - - --- 2020-07-27 Mauro Matteo Cascella New
hw/net/xgmac: Fix buffer overflow in xgmac_enet_send() hw/net/xgmac: Fix buffer overflow in xgmac_enet_send() - - 1 - --- 2020-07-10 Mauro Matteo Cascella New
hw/net/ftgmac100: Fix integer overflow in ftgmac100_do_tx() hw/net/ftgmac100: Fix integer overflow in ftgmac100_do_tx() - - - - --- 2020-07-10 Mauro Matteo Cascella New