From: "Philippe Mathieu-Daudé" <f4bug@amsat.org>
To: qemu-devel@nongnu.org
Cc: qemu-block@nongnu.org, "Simon Wörner" <contact@simon-woerner.de>,
"Bin Meng" <bin.meng@windriver.com>,
"Muhammad Alifa Ramdhan" <info@starlabs.sg>,
"Philippe Mathieu-Daudé" <f4bug@amsat.org>,
"Cornelius Aschermann" <cornelius.aschermann@rub.de>,
"Sergej Schumilo" <sergej@schumilo.de>
Subject: [PULL 0/7] SD/MMC patches for 2021-03-21
Date: Mon, 22 Mar 2021 18:16:03 +0100 [thread overview]
Message-ID: <20210322171610.4183696-1-f4bug@amsat.org> (raw)
The following changes since commit b184750926812cb78ac0caf4c4b2b13683b5bde3:
Merge remote-tracking branch 'remotes/jasowang/tags/net-pull-request' into staging (2021-03-22 11:24:55 +0000)
are available in the Git repository at:
https://github.com/philmd/qemu.git tags/sdmmc-20210322
for you to fetch changes up to cffb446e8fd19a14e1634c7a3a8b07be3f01d5c9:
hw/sd: sdhci: Reset the data pointer of s->fifo_buffer[] when a different block size is programmed (2021-03-22 16:56:22 +0100)
----------------------------------------------------------------
SD/MMC patches queue
- Fix build error when DEBUG_SD is on
- Perform SD ERASE operation
- SDHCI ADMA heap buffer overflow
(CVE-2020-17380, CVE-2020-25085, CVE-2021-3409)
----------------------------------------------------------------
Bin Meng (7):
hw/sd: sd: Fix build error when DEBUG_SD is on
hw/sd: sd: Actually perform the erase operation
hw/sd: sdhci: Don't transfer any data when command time out
hw/sd: sdhci: Don't write to SDHC_SYSAD register when transfer is in
progress
hw/sd: sdhci: Correctly set the controller status for ADMA
hw/sd: sdhci: Limit block size only when SDHC_BLKSIZE register is
writable
hw/sd: sdhci: Reset the data pointer of s->fifo_buffer[] when a
different block size is programmed
hw/sd/sd.c | 23 +++++++++++++---------
hw/sd/sdhci.c | 53 ++++++++++++++++++++++++++++++++++-----------------
2 files changed, 50 insertions(+), 26 deletions(-)
--
2.26.2
next reply other threads:[~2021-03-22 17:22 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
2021-03-22 17:16 Philippe Mathieu-Daudé [this message]
2021-03-22 17:16 ` [PULL 1/7] hw/sd: sd: Fix build error when DEBUG_SD is on Philippe Mathieu-Daudé
2021-03-22 17:16 ` [PULL 2/7] hw/sd: sd: Actually perform the erase operation Philippe Mathieu-Daudé
2021-03-22 17:16 ` [PULL 3/7] hw/sd: sdhci: Don't transfer any data when command time out Philippe Mathieu-Daudé
2021-03-22 17:16 ` [PULL 4/7] hw/sd: sdhci: Don't write to SDHC_SYSAD register when transfer is in progress Philippe Mathieu-Daudé
2021-03-22 17:16 ` [PULL 5/7] hw/sd: sdhci: Correctly set the controller status for ADMA Philippe Mathieu-Daudé
2021-03-22 17:16 ` [PULL 6/7] hw/sd: sdhci: Limit block size only when SDHC_BLKSIZE register is writable Philippe Mathieu-Daudé
2021-03-22 17:16 ` [PULL 7/7] hw/sd: sdhci: Reset the data pointer of s->fifo_buffer[] when a different block size is programmed Philippe Mathieu-Daudé
2021-03-23 10:48 ` [PULL 0/7] SD/MMC patches for 2021-03-21 Peter Maydell
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20210322171610.4183696-1-f4bug@amsat.org \
--to=f4bug@amsat.org \
--cc=bin.meng@windriver.com \
--cc=contact@simon-woerner.de \
--cc=cornelius.aschermann@rub.de \
--cc=info@starlabs.sg \
--cc=qemu-block@nongnu.org \
--cc=qemu-devel@nongnu.org \
--cc=sergej@schumilo.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).