$NetBSD: patch-CVE-2015-8554,v 1.1 2016/01/07 17:53:58 bouyer Exp $ patch for CVE-2015-8554 aka XSA-164 from http://xenbits.xenproject.org/xsa/xsa164.patch --- qemu-xen-traditional/hw/pt-msi.c.orig +++ qemu-xen-traditional/hw/pt-msi.c @@ -440,6 +440,13 @@ static void pci_msix_writel(void *opaque return; } + if ( addr - msix->mmio_base_addr >= msix->total_entries * 16 ) + { + PT_LOG("Error: Out of bounds write to MSI-X table," + " addr %016"PRIx64"\n", addr); + return; + } + entry_nr = (addr - msix->mmio_base_addr) / 16; entry = &msix->msix_entry[entry_nr]; offset = ((addr - msix->mmio_base_addr) % 16) / 4;