aarch64-virt: heap-use-after-free in gic_dist_writeb
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
QEMU |
Fix Committed
|
Undecided
|
Unassigned |
Bug Description
Reproducer:
cat << EOF | ./qemu-
-machine virt,accel=qtest -qtest stdio
writel 0x8000f00 0x5affaf
write 0x8000eff 0x1 0x0
EOF
Stacktrace:
../hw/intc/
SUMMARY: UndefinedBehavi
=======
==641550==ERROR: AddressSanitizer: heap-use-after-free on address 0x629000023a85 at pc 0x55b5dfb0fbf8 bp 0x7fff95cb5870 sp 0x7fff95cb5868
WRITE of size 1 at 0x629000023a85 thread T0
#0 0x55b5dfb0fbf7 in gic_dist_writeb /home/alxndr/
#1 0x55b5dfb061e2 in gic_dist_write /home/alxndr/
#2 0x55b5e0809ef4 in memory_
#3 0x55b5e0808bfb in access_
#4 0x55b5e0808467 in memory_
#5 0x55b5e0b98ffb in flatview_
#6 0x55b5e0b8e71b in flatview_write /home/alxndr/
#7 0x55b5e0b8e71b in address_space_write /home/alxndr/
#8 0x55b5e07fad35 in qtest_process_
#9 0x55b5e07f3b97 in qtest_process_inbuf /home/alxndr/
#10 0x55b5e1044286 in fd_chr_read /home/alxndr/
#11 0x7fa997b30aae in g_main_
#12 0x55b5e169f363 in glib_pollfds_poll /home/alxndr/
#13 0x55b5e169f363 in os_host_
#14 0x55b5e169f363 in main_loop_wait /home/alxndr/
#15 0x55b5e075a599 in qemu_main_loop /home/alxndr/
#16 0x55b5de9e71fd in main /home/alxndr/
#17 0x7fa9975d5cc9 in __libc_start_main csu/../
#18 0x55b5de93abc9 in _start (/home/
Changed in qemu: | |
status: | New → Confirmed |
Fix for this 13+ years old issue: /lists. gnu.org/ archive/ html/qemu- devel/2021- 01/msg07969. html
https:/