friedkiwi/qemu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
master
qemu/hw/net
History
Peter Maydell 4571c79c57 hw/net/vmxnet3: Correct bounds check on tx queue index 
In vmxnet3_io_bar0_write(), we try to bounds-check the TX queue index
provided by the guest against the total number of queues.  However,
we have an off-by-one error: the valid indexes are from 0 to
txq_num-1, so we need a "<" comparison, not "<=".

Cc: qemu-stable@nongnu.org
Resolves: https://gitlab.com/qemu-project/qemu/-/work_items/3780
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
Reviewed-by: Philippe Mathieu-Daudé <philmd@oss.qualcomm.com>
Message-id: 20260706175408.905362-1-peter.maydell@linaro.org
2026-07-13 12:34:17 +01:00
..
can
hw/net/can/flexcan: Subclass TYPE_CAN_FLEXCAN
2026-07-07 17:10:24 +02:00
fsl_etsec
hw/net/fsl_etsec: validate FCB offsets in process_tx_fcb()
2026-07-06 10:05:15 +01:00
rocker
hw/net/rocker_of_dpa: Avoid unaligned accesses in _of_dpa_flow_match()
2026-05-29 11:54:06 +08:00
allwinner_emac.c
include: move hw/sysbus.h to hw/core/
2025-12-27 10:11:08 +01:00
allwinner-sun8i-emac.c
hw/net/allwinner-sun8i-emac: Flush queued packets when rx is enabled
2026-05-05 09:25:21 +01:00
cadence_gem.c
include: move hw/registerfields.h to hw/core/
2025-12-27 10:11:08 +01:00
dp8393x.c
include: move hw/sysbus.h to hw/core/
2025-12-27 10:11:08 +01:00
e1000_common.h
…
e1000_regs.h
…
e1000.c
…
e1000e_core.c
…
e1000e_core.h
…
e1000e.c
include: move hw/hw.h to hw/core/, rename
2025-12-27 10:11:09 +01:00
e1000x_common.c
…
e1000x_common.h
…
e1000x_regs.h
…
eepro100.c
…
ftgmac100.c
hw/net/ftgmac100: Convert to DEFINE_TYPES() with inlined TypeInfo
2026-06-07 06:41:10 +02:00
i82596.c
…
i82596.h
…
igb_common.h
…
igb_core.c
…
igb_core.h
…
igb_regs.h
…
igb.c
include: move hw/hw.h to hw/core/, rename
2025-12-27 10:11:09 +01:00
igbvf.c
hw/pci/msix: fix error handling for msix_init callers
2026-03-23 14:54:13 +01:00
imx_fec.c
…
Kconfig
hw/net/can/flexcan: NXP FlexCAN core emulation
2026-06-29 11:03:46 +01:00
lan9118_phy.c
include: move hw/resettable.h to hw/core/
2025-12-27 10:11:08 +01:00
lan9118.c
include: move hw/sysbus.h to hw/core/
2025-12-27 10:11:08 +01:00
lance.c
…
lasi_i82596.c
include: move hw/sysbus.h to hw/core/
2025-12-27 10:11:08 +01:00
mcf_fec.c
system: Move cpu_physical_memory_*() declarations to 'system/physmem.h'
2026-06-18 14:27:04 +02:00
meson.build
hw/net: use stub_ss for vhost_net-stub.c
2026-05-28 18:44:03 +02:00
msf2-emac.c
include: move hw/registerfields.h to hw/core/
2025-12-27 10:11:08 +01:00
mv88w8618_eth.c
include: move hw/sysbus.h to hw/core/
2025-12-27 10:11:08 +01:00
ne2000-isa.c
…
ne2000-pci.c
…
ne2000.c
…
ne2000.h
…
net_rx_pkt.c
…
net_rx_pkt.h
…
net_tx_pkt.c
hw/net: fix e1000e/igb ip_len inflation by Ethernet minimum-frame padding
2026-07-07 17:10:24 +02:00
net_tx_pkt.h
…
npcm7xx_emc.c
…
npcm_gmac.c
hw/net/npcm_gmac: Catch accesses off the end of the register array
2026-03-09 16:45:24 +01:00
npcm_pcs.c
include: move hw/registerfields.h to hw/core/
2025-12-27 10:11:08 +01:00
opencores_eth.c
system: Move cpu_physical_memory_*() declarations to 'system/physmem.h'
2026-06-18 14:27:04 +02:00
pcnet-pci.c
…
pcnet.c
…
pcnet.h
…
rtl8139.c
hw/net/rtl8319: Work around GCC sanitizer / -Wstringop-overflow bug
2026-03-12 18:28:00 +00:00
smc91c111.c
hw/net/smc91c111: Don't allow negative-length packets
2026-03-06 09:43:18 +00:00
spapr_llan.c
…
stellaris_enet.c
include: move hw/sysbus.h to hw/core/
2025-12-27 10:11:08 +01:00
sungem.c
…
sunhme.c
…
trace-events
hw/net/xilinx_ethlite: Check for oversized TX packets
2026-03-08 23:08:42 +01:00
trace.h
…
tulip.c
…
tulip.h
…
vhost_net-stub.c
…
vhost_net.c
vhost: make vhost_dev.features private
2026-06-03 08:36:11 -04:00
virtio-net.c
virtio-net: validate RSS indirections_len in post_load
2026-07-05 09:06:13 -04:00
vmware_utils.h
…
vmxnet3_defs.h
…
vmxnet3.c
hw/net/vmxnet3: Correct bounds check on tx queue index
2026-07-13 12:34:17 +01:00
vmxnet3.h
…
vmxnet_debug.h
…
xen_nic.c
…
xilinx_axienet.c
hw/net/xilinx_axienet: Prevent writes to PHY Identification registers
2026-03-08 23:08:42 +01:00
xilinx_ethlite.c
hw/net/xilinx_ethlite: Check for oversized TX packets
2026-03-08 23:08:42 +01:00