Re: [PATCH] hw/audio/virtio-sound: fix heap buffer overflow

2024-09-06 Thread Philippe Mathieu-Daudé
On 1/9/24 15:01, Volker Rümelin wrote: Currently, the guest may write to the device configuration space, whereas the virtio sound device specification in chapter 5.14.4 clearly states that the fields in the device configuration space are driver-read-only. Remove the set_config function from the

Re: [PATCH] hw/audio/virtio-sound: fix heap buffer overflow

2024-09-02 Thread Gerd Hoffmann
On Sun, Sep 01, 2024 at 03:01:12PM GMT, Volker Rümelin wrote: > Currently, the guest may write to the device configuration space, > whereas the virtio sound device specification in chapter 5.14.4 > clearly states that the fields in the device configuration space > are driver-read-only. > > Remove

[PATCH] hw/audio/virtio-sound: fix heap buffer overflow

2024-09-01 Thread Volker Rümelin
Currently, the guest may write to the device configuration space, whereas the virtio sound device specification in chapter 5.14.4 clearly states that the fields in the device configuration space are driver-read-only. Remove the set_config function from the virtio_snd class. This also prevents a h