SYS-OSS/FRET-LibAFL
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

msix: assert that accesses are within bounds

Browse Source 
This makes the testcase from the next patch fail.

Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
This commit is contained in:
Paolo Bonzini 2020-12-01 09:42:23 -05:00
parent c9ca89a907
commit 58cf0f86d4
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
hw/pci/msix.c
View File

@ -179,6 +179,7 @@ static uint64_t msix_table_mmio_read(void *opaque, hwaddr addr,
{ {
PCIDevice *dev = opaque; PCIDevice *dev = opaque;
assert(addr + size <= dev->msix_entries_nr * PCI_MSIX_ENTRY_SIZE);
return pci_get_long(dev->msix_table + addr); return pci_get_long(dev->msix_table + addr);
} }
@ -189,6 +190,8 @@ static void msix_table_mmio_write(void *opaque, hwaddr addr,
int vector = addr / PCI_MSIX_ENTRY_SIZE; int vector = addr / PCI_MSIX_ENTRY_SIZE;
bool was_masked; bool was_masked;
assert(addr + size <= dev->msix_entries_nr * PCI_MSIX_ENTRY_SIZE);
was_masked = msix_is_masked(dev, vector); was_masked = msix_is_masked(dev, vector);
pci_set_long(dev->msix_table + addr, val); pci_set_long(dev->msix_table + addr, val);
msix_handle_mask_update(dev, vector, was_masked); msix_handle_mask_update(dev, vector, was_masked);