Re: [PATCH v2 0/3] hw/sd/sdhci: Fix DMA Transfer Block Size field width

2020-09-18 Thread Philippe Mathieu-Daudé
On 9/1/20 4:04 PM, Philippe Mathieu-Daudé wrote: > Fix the SDHCI issue reported last week by Alexander: > https://bugs.launchpad.net/qemu/+bug/1892960 > > The field is 12-bit (4KiB) but the guest can set > up to 16-bit (64KiB), leading to OOB access. > > since v1: > commited unstaged change in

Re: [PATCH v2 0/3] hw/sd/sdhci: Fix DMA Transfer Block Size field width

2020-09-10 Thread Alexander Bulekov
For this series: Tested-by: Alexander Bulekov On 200901 1604, Philippe Mathieu-Daudé wrote: > Fix the SDHCI issue reported last week by Alexander: > https://bugs.launchpad.net/qemu/+bug/1892960 > > The field is 12-bit (4KiB) but the guest can set > up to 16-bit (64KiB), leading to OOB access.

[PATCH v2 0/3] hw/sd/sdhci: Fix DMA Transfer Block Size field width

2020-09-01 Thread Philippe Mathieu-Daudé
Fix the SDHCI issue reported last week by Alexander: https://bugs.launchpad.net/qemu/+bug/1892960 The field is 12-bit (4KiB) but the guest can set up to 16-bit (64KiB), leading to OOB access. since v1: commited unstaged change in patch #3... Philippe Mathieu-Daudé (3): hw/sd/sdhci: Fix