Re: [PATCH v4 05/13] hvf: Fix OOB write in RDTSCP instruction decode

2022-02-14 Thread Philippe Mathieu-Daudé via
Hi Cameron, On 11/2/22 17:34, Philippe Mathieu-Daudé wrote: From: Cameron Esfahani A guest could craft a specific stream of instructions that will have QEMU write 0xF9 to inappropriate locations in memory. Add additional asserts to check for this. Generate a #UD if there are more than 14

[PATCH v4 05/13] hvf: Fix OOB write in RDTSCP instruction decode

2022-02-11 Thread Philippe Mathieu-Daudé via
From: Cameron Esfahani A guest could craft a specific stream of instructions that will have QEMU write 0xF9 to inappropriate locations in memory. Add additional asserts to check for this. Generate a #UD if there are more than 14 prefix bytes. Found by Julian Stecklina Signed-off-by: Cameron