Re: [PATCH v5 05/16] hvf: Fix OOB write in RDTSCP instruction decode

2022-02-25 Thread Peter Maydell
On Mon, 14 Feb 2022 at 18:57, Philippe Mathieu-Daudé wrote: > > From: Cameron Esfahani > > A guest could craft a specific stream of instructions that will have QEMU > write 0xF9 to inappropriate locations in memory. Add additional asserts > to check for this. Generate a #UD if there are more

[PATCH v5 05/16] hvf: Fix OOB write in RDTSCP instruction decode

2022-02-14 Thread Philippe Mathieu-Daudé via
From: Cameron Esfahani A guest could craft a specific stream of instructions that will have QEMU write 0xF9 to inappropriate locations in memory. Add additional asserts to check for this. Generate a #UD if there are more than 14 prefix bytes. Found by Julian Stecklina Signed-off-by: Cameron