|
 |
c687bc |
From 6955223aa15ab6ea53322218ec03fb3dc2b776f8 Mon Sep 17 00:00:00 2001
|
|
|
c687bc |
From: Jon Maloy <jmaloy@redhat.com>
|
|
|
c687bc |
Date: Thu, 14 Jan 2021 00:07:05 -0500
|
|
|
c687bc |
Subject: [PATCH 16/17] hw: ehci: check return value of 'usb_packet_map'
|
|
|
c687bc |
|
|
|
c687bc |
RH-Author: Jon Maloy <jmaloy@redhat.com>
|
|
|
c687bc |
Message-id: <20210114000705.945169-2-jmaloy@redhat.com>
|
|
|
c687bc |
Patchwork-id: 100634
|
|
|
c687bc |
O-Subject: [RHEL-8.4.0 qemu-kvm PATCH 1/1] hw: ehci: check return value of 'usb_packet_map'
|
|
|
c687bc |
Bugzilla: 1898628
|
|
|
c687bc |
RH-Acked-by: Gerd Hoffmann <kraxel@redhat.com>
|
|
|
c687bc |
RH-Acked-by: Laurent Vivier <lvivier@redhat.com>
|
|
|
c687bc |
RH-Acked-by: Thomas Huth <thuth@redhat.com>
|
|
|
c687bc |
|
|
|
c687bc |
From: Li Qiang <liq3ea@163.com>
|
|
|
c687bc |
|
|
|
c687bc |
If 'usb_packet_map' fails, we should stop to process the usb
|
|
|
c687bc |
request.
|
|
|
c687bc |
|
|
|
c687bc |
Signed-off-by: Li Qiang <liq3ea@163.com>
|
|
|
c687bc |
Message-Id: <20200812161727.29412-1-liq3ea@163.com>
|
|
|
c687bc |
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
|
|
|
c687bc |
|
|
|
c687bc |
(cherry picked from commit 2fdb42d840400d58f2e706ecca82c142b97bcbd6)
|
|
|
c687bc |
Signed-off-by: Jon Maloy <jmaloy@redhat.com>
|
|
|
c687bc |
Signed-off-by: Danilo C. L. de Paula <ddepaula@redhat.com>
|
|
|
c687bc |
---
|
|
|
c687bc |
hw/usb/hcd-ehci.c | 10 ++++++++--
|
|
|
c687bc |
1 file changed, 8 insertions(+), 2 deletions(-)
|
|
|
c687bc |
|
|
|
c687bc |
diff --git a/hw/usb/hcd-ehci.c b/hw/usb/hcd-ehci.c
|
|
|
c687bc |
index 56ab2f457f4..024b1ed6b67 100644
|
|
|
c687bc |
--- a/hw/usb/hcd-ehci.c
|
|
|
c687bc |
+++ b/hw/usb/hcd-ehci.c
|
|
|
c687bc |
@@ -1374,7 +1374,10 @@ static int ehci_execute(EHCIPacket *p, const char *action)
|
|
|
c687bc |
spd = (p->pid == USB_TOKEN_IN && NLPTR_TBIT(p->qtd.altnext) == 0);
|
|
|
c687bc |
usb_packet_setup(&p->packet, p->pid, ep, 0, p->qtdaddr, spd,
|
|
|
c687bc |
(p->qtd.token & QTD_TOKEN_IOC) != 0);
|
|
|
c687bc |
- usb_packet_map(&p->packet, &p->sgl);
|
|
|
c687bc |
+ if (usb_packet_map(&p->packet, &p->sgl)) {
|
|
|
c687bc |
+ qemu_sglist_destroy(&p->sgl);
|
|
|
c687bc |
+ return -1;
|
|
|
c687bc |
+ }
|
|
|
c687bc |
p->async = EHCI_ASYNC_INITIALIZED;
|
|
|
c687bc |
}
|
|
|
c687bc |
|
|
|
c687bc |
@@ -1453,7 +1456,10 @@ static int ehci_process_itd(EHCIState *ehci,
|
|
|
c687bc |
if (ep && ep->type == USB_ENDPOINT_XFER_ISOC) {
|
|
|
c687bc |
usb_packet_setup(&ehci->ipacket, pid, ep, 0, addr, false,
|
|
|
c687bc |
(itd->transact[i] & ITD_XACT_IOC) != 0);
|
|
|
c687bc |
- usb_packet_map(&ehci->ipacket, &ehci->isgl);
|
|
|
c687bc |
+ if (usb_packet_map(&ehci->ipacket, &ehci->isgl)) {
|
|
|
c687bc |
+ qemu_sglist_destroy(&ehci->isgl);
|
|
|
c687bc |
+ return -1;
|
|
|
c687bc |
+ }
|
|
|
c687bc |
usb_handle_packet(dev, &ehci->ipacket);
|
|
|
c687bc |
usb_packet_unmap(&ehci->ipacket, &ehci->isgl);
|
|
|
c687bc |
} else {
|
|
|
c687bc |
--
|
|
|
c687bc |
2.27.0
|
|
|
c687bc |
|