mbox series

[v3,0/2] scsi: lsi: break infinite loop after 10k instructions

Message ID 20190809063835.6717-1-ppandit@redhat.com (mailing list archive)
Headers show
Series scsi: lsi: break infinite loop after 10k instructions | expand

Message

Prasad Pandit Aug. 9, 2019, 6:38 a.m. UTC 
From: Prasad J Pandit <pjp@fedoraproject.org>

Hello,

While executing script, the LSI SCSI Adapter emulator could run into an
infinite loop, if next instruction read by 's->dsp' index has an empty
opcode. Raise an illegal instruction interrupt and exit the loop after
10k iterations.

 -> https://lists.gnu.org/archive/html/qemu-devel/2019-08/msg01427.html

Thank you.
--
Prasad J Pandit (2):
  scsi: lsi: exit infinite loop while executing script (CVE-2019-12068)
  scsi: lsi: use macro LSI_MAX_INSN instead of a magic number

 hw/scsi/lsi53c895a.c | 13 +++++++++++--
 1 file changed, 11 insertions(+), 2 deletions(-)