[vbox-dev] Bug report (major)

[Frank Mehnert]

On Friday 30 April 2010, TwoThe wrote:
> Type: Bug
> Severity: major
> Component: VirtualBox OSE
> Host: Ubuntu 64
>
> In file src/VBox/Devices/PC/DevAPIC.cpp:
>
>    919        case 0x30:
>    920            /* Here one of the differences with regular APIC: ICR is
> single 64-bit register */ !921           val = ((uint64_t)apic->icr[0x31]
> << 32) | apic->icr[0x30]; 922            break;
>
> In line 921 APICState->icr is accessed at address 0x31 and 0x30 but icr has
> only 2 elements, as defined here (in the same file): 219    uint32_t
> icr[2];
>
> This causes an invalid memory access.

Thank you for this report!

Your observation is corect and the code will be fixed.

Kind regards,

Frank
-- 
Dr.-Ing. Frank Mehnert

Sitz der Gesellschaft:
Sun Microsystems GmbH, Sonnenallee 1, 85551 Kirchheim-Heimstetten
Amtsgericht München: HRB 161028
Geschäftsführer: Jürgen Kunz
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part.
URL: <http://www.virtualbox.org/pipermail/vbox-dev/attachments/20100501/c61120a5/attachment.sig>