On 6/7/26 20:01, Peter Maydell wrote:
On Wed, 5 Nov 2025 at 14:39, Torin Carey <[email protected]> wrote:
The EDU device doesn't enforce any bound checks on the addresses provided,
allowing users of the device to perform arbitrary reads and writes to QEMU's
address space.
Signed-off-by: Torin Carey <[email protected]>
---
hw/misc/edu.c | 24 ++++++++++++++----------
1 file changed, 14 insertions(+), 10 deletions(-)
This patch got lost because of a tangent conversation, but the
bug was recently re-reported as
https://gitlab.com/qemu-project/qemu/-/work_items/3852
and I think the patch itself is good and we should apply it.
Patch queued, thanks.
Cc: [email protected]
Resolves: https://gitlab.com/qemu-project/qemu/-/work_items/3852
Fixes: 7b608e5d6c1 ("hw: misc: edu: use qemu_log_mask instead of hw_error")
Reviewed-by: Peter Maydell <[email protected]>
thanks
-- PMM
