hw/i2c/aspeed_i2c: Fix out-of-bounds read in I2C MMIO

[PATCH v2 0/2] hw/i2c/aspeed_i2c: Fix out-of-bounds read in I2C MMIO

Jamin Lin posted 2 patches 16 hours ago

Download series mbox

Patches applied successfully (tree, apply log)
git fetch https://github.com/patchew-project/qemu tags/patchew/20260210024331.3984696-1-jamin._5Flin@aspeedtech.com

Maintainers: "Cédric Le Goater" <clg@kaod.org>, Peter Maydell <peter.maydell@linaro.org>, Steven Lee <steven_lee@aspeedtech.com>, Troy Lee <leetroy@gmail.com>, Jamin Lin <jamin_lin@aspeedtech.com>, Andrew Jeffery <andrew@codeconstruct.com.au>, Joel Stanley <joel@jms.id.au>

include/hw/i2c/aspeed_i2c.h |  3 +-
hw/i2c/aspeed_i2c.c         | 58 ++++++++++++++++++-------------------
2 files changed, 29 insertions(+), 32 deletions(-)

Expand all Fold all

[PATCH v2 0/2] hw/i2c/aspeed_i2c: Fix out-of-bounds read in I2C MMIO

Posted by Jamin Lin 16 hours ago

v1:
 1. Fix Out-of-Bounds access by using dynamic register array

v2:
 1. Fix Out-of-Bounds access by increasing static array size
 2. Increase I2C device register size to 0xA0 for AST2700 A1

Jamin Lin (2):
  hw/i2c/aspeed_i2c: Fix out-of-bounds read in I2C MMIO handlers
  hw/i2c/aspeed_i2c: Increase I2C device register size to 0xA0

 include/hw/i2c/aspeed_i2c.h |  3 +-
 hw/i2c/aspeed_i2c.c         | 58 ++++++++++++++++++-------------------
 2 files changed, 29 insertions(+), 32 deletions(-)

-- 
2.43.0