Re: [Qemu-devel] [PATCH] ide: ahci: add check to avoid null dereference (CVE-2019-12067)

2019-08-08 Thread John Snow
On 8/8/19 5:11 AM, Philippe Mathieu-Daudé wrote: > Hi Prasad, > > On 8/8/19 8:56 AM, P J P wrote: >> From: Prasad J Pandit >> >> AHCI emulator while committing DMA buffer in ahci_commit_buf() >> may do a NULL dereference if the command header 'ad->cur_cmd' >> is null. Add check to avoid it. >>

Re: [Qemu-devel] [PATCH] ide: ahci: add check to avoid null dereference (CVE-2019-12067)

2019-08-08 Thread Philippe Mathieu-Daudé
Hi Prasad, On 8/8/19 8:56 AM, P J P wrote: > From: Prasad J Pandit > > AHCI emulator while committing DMA buffer in ahci_commit_buf() > may do a NULL dereference if the command header 'ad->cur_cmd' > is null. Add check to avoid it. > > Reported-by: Bugs SysSec > Signed-off-by: Prasad J Pandit

[Qemu-devel] [PATCH] ide: ahci: add check to avoid null dereference (CVE-2019-12067)

2019-08-07 Thread P J P
From: Prasad J Pandit AHCI emulator while committing DMA buffer in ahci_commit_buf() may do a NULL dereference if the command header 'ad->cur_cmd' is null. Add check to avoid it. Reported-by: Bugs SysSec Signed-off-by: Prasad J Pandit --- hw/ide/ahci.c | 6 -- 1 file changed, 4 insertions