Stefan Weil 68716da745 apb: Fix out-of-bounds array write access ... The array regs is declared with IOMMU_NREGS (3) elements and accessed using IOMMU_CTRL (0) and IOMMU_BASE (8). In most cases, those values are right shifted before being used as an index which results in indices 0 and 1. In one case, this right shift was missing for IOMMU_BASE which results in an out-of-bounds write access with index 8. The patch adds the missing shift operation also for IOMMU_CTRL where it is needed only for cosmetic reasons. Signed-off-by: Stefan Weil <sw@weilnetz.de> Signed-off-by: Mark Cave-Ayland <mark.cave-ayland@ilande.co.uk>		2014-06-20 23:52:49 +01:00
..
apb.c	apb: Fix out-of-bounds array write access	2014-06-20 23:52:49 +01:00
bonito.c	savevm: Remove all the unneeded version_minimum_id_old (rest)	2014-05-14 15:24:51 +02:00
grackle.c	pci-host: Consistently set cannot_instantiate_with_device_add_yet	2013-12-23 00:27:23 +01:00
Makefile.objs	dec.c - move to pci-bridge	2013-06-02 18:13:37 +03:00
pam.c	pam: partly fix write-only mode	2014-03-09 21:09:38 +02:00
piix.c	savevm: Remove all the unneeded version_minimum_id_old (x86)	2014-06-16 04:55:26 +02:00
ppce500.c	hw/pci-host/ppce500: Fix typo in vmstate definition	2014-06-16 13:24:41 +02:00
prep.c	hw/pci-host/prep: Don't reverse IO accesses on bigendian hosts	2014-04-08 18:37:45 +01:00
q35.c	savevm: Remove all the unneeded version_minimum_id_old (x86)	2014-06-16 04:55:26 +02:00
uninorth.c	pci-host: Consistently set cannot_instantiate_with_device_add_yet	2013-12-23 00:27:23 +01:00
versatile.c	pci-host: Consistently set cannot_instantiate_with_device_add_yet	2013-12-23 00:27:23 +01:00