On 20/10/26 17:17, Brian Cain wrote:
Invalid packets can exhaust the available instruction slots while
decode_set_slot_number() searches for a valid one. We would then try to
evaluate a negative shift before returning the packet as invalid.
Detected by clang's UBSan.
Link:
https://lore.kernel.org/qemu-devel/CAFEAcA8CYaJ=jayc29rsdumd_swqujqz4fnqyw7ocrwithz...@mail.gmail.com/
Signed-off-by: Brian Cain <[email protected]>
---
target/hexagon/decode.c | 5 ++++-
1 file changed, 4 insertions(+), 1 deletion(-)
Reviewed-by: Philippe Mathieu-Daudé <[email protected]>
