Mauro Matteo Cascella 4367a20cc4 scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) ... Set current_req to NULL, not current_req->req, to prevent reusing a free'd buffer in case of repeated SCSI cancel requests. Also apply the fix to CLEAR QUEUE and BUS DEVICE RESET messages as well, since they also cancel the request. Thanks to Alexander Bulekov for providing a reproducer. Fixes: CVE-2022-0216 Resolves: https://gitlab.com/qemu-project/qemu/-/issues/972 Signed-off-by: Mauro Matteo Cascella <mcascell@redhat.com> Tested-by: Alexander Bulekov <alxndr@bu.edu> Message-Id: <20220711123316.421279-1-mcascell@redhat.com> Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>		2022-07-13 16:58:57 +02:00
..
avocado	test/avocado/machine_aspeed.py: Add an I2C RTC test	2022-06-22 09:49:33 +02:00
bench	test/crypto: Add test suite for crypto akcipher	2022-05-26 11:41:54 +01:00
data	tests/acpi: virt: update golden masters for VIOT	2022-06-09 19:32:49 -04:00
decode
docker	vfio-user: build library	2022-06-15 16:42:33 +01:00
fp	tests/fp: Do not build softfloat3 tests if TCG is disabled	2022-07-05 09:33:49 +02:00
guest-debug	tests/guest-debug: better handle gdb crashes	2022-04-20 16:04:20 +01:00
image-fuzzer
include
keys
lcitool	tests/docker: update debian-amd64 with lcitool	2022-06-01 15:47:23 +01:00
migration	tests/migration: fix unix socket migration	2021-07-14 14:15:52 +01:00
multiboot
perf/block/qcow2
plugin	tests/plugins: add instruction matching to libinsn.so	2022-02-09 12:08:42 +00:00
qapi-schema	qapi-schema: test: add a unit test for parsing array alternates	2022-04-21 10:11:25 +02:00
qemu-iotests	iotests/copy-before-write: specify required_fmts	2022-07-12 13:21:02 +05:30
qtest	scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216)	2022-07-13 16:58:57 +02:00
rocker
tcg	* fuzzing fixes (Alexander)	2022-07-12 14:12:15 +01:00
tsan
uefi-test-tools
unit	tests: fix test-cutils leaks	2022-07-04 13:42:08 +02:00
vm	tests/vm: do not specify -bios option	2022-07-06 09:27:58 +02:00
vmstate-static-checker-data
check-block.sh	tests/qemu-iotests: Move the bash and sanitizer checks to meson.build	2022-04-20 09:46:54 +02:00
dbus-vmstate-daemon.sh
Makefile.include	tests: install "qemu" namespace package into venv	2022-06-06 09:26:54 +02:00
meson.build	meson: create have_vhost_* variables	2022-05-07 07:46:58 +02:00
requirements.txt	tests: install "qemu" namespace package into venv	2022-06-06 09:26:54 +02:00
test-qht-par.c
vhost-user-bridge.c	Replace qemu_real_host_page variables with inlined functions	2022-04-06 10:50:38 +02:00