[Bug 264435] bhyve: hda_write() can index (and jump) beyond end of array
Date: Fri, 03 Jun 2022 23:36:32 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=264435 Kubilay Kocak <koobs@FreeBSD.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|New |Open Summary|bhyve hda_write() can index |bhyve: hda_write() can |(and jump) beyond end of |index (and jump) beyond end |array |of array CC| |secteam@FreeBSD.org, | |virtualization@FreeBSD.org Keywords| |needs-patch, needs-qa, | |security Priority|--- |Normal Flags| |maintainer-feedback?(sectea | |m@FreeBSD.org), | |mfc-stable13?, | |mfc-stable12? --- Comment #1 from Kubilay Kocak <koobs@FreeBSD.org> --- Thank you for your report and analysis Robert. ^Triage: Ed may also be interested in this (see base 9349d3784578) -- You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug.