Skip to content

Commit

Permalink
hw/smbios: Fix port connector option validation
Browse files Browse the repository at this point in the history
qemu_smbios_type8_opts did not have the list terminator and that
resulted in out-of-bound memory access. It also needs to have an element
for the type option.

Cc: qemu-stable@nongnu.org
Fixes: fd8caa2 ("hw/smbios: support for type 8 (port connector)")
Signed-off-by: Akihiko Odaki <akihiko.odaki@daynix.com>
Reviewed-by: Michael Tokarev <mjt@tls.msk.ru>
Reviewed-by: Ani Sinha <anisinha@redhat.com>
Reviewed-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Michael Tokarev <mjt@tls.msk.ru>
  • Loading branch information
akihikodaki authored and Michael Tokarev committed Feb 13, 2024
1 parent cd8a35b commit 196578c
Showing 1 changed file with 6 additions and 0 deletions.
6 changes: 6 additions & 0 deletions hw/smbios/smbios.c
Original file line number Diff line number Diff line change
Expand Up @@ -352,6 +352,11 @@ static const QemuOptDesc qemu_smbios_type4_opts[] = {
};

static const QemuOptDesc qemu_smbios_type8_opts[] = {
{
.name = "type",
.type = QEMU_OPT_NUMBER,
.help = "SMBIOS element type",
},
{
.name = "internal_reference",
.type = QEMU_OPT_STRING,
Expand All @@ -372,6 +377,7 @@ static const QemuOptDesc qemu_smbios_type8_opts[] = {
.type = QEMU_OPT_NUMBER,
.help = "port type",
},
{ /* end of list */ }
};

static const QemuOptDesc qemu_smbios_type11_opts[] = {
Expand Down

0 comments on commit 196578c

Please sign in to comment.