Re: [Qemu-devel] QEMU soundcards vulnerable to jack retasking?

[Gerd Hoffmann <kraxel@redhat.com>]

On Fr, 2016-11-25 at 21:25 +0100, bancfc@openmailbox.org wrote:
> Recent security research shows that soundcards support surreptitiously 
> switching line-out jacks into line-in by modifying the software stack. 
> The way modern speakers and headphones are designed makes them readily 
> usable as microphones. The Intel High Definition (HD) Audio standards 
> which all modern consumer soundcards are based mandates this stupidity.
> 
> https://arxiv.org/ftp/arxiv/papers/1611/1611.07350.pdf
> 
> Does anyone know if QEMU's emulated sound devices follow this standard? 

No.  Output line is output only and input line is input only, period.

There are three qemu hda codecs available:

  hda-output
    only playback (line-out).  No way the guest can record anything.

  hda-duplex
    record (line-in) and playback (line-out).  Use that if you need
    sound recording in the guest.

  hda-micro
    record (micro) and playback (speaker).  Same as hda-duplex, except
    that the record and playback channels are tagged differently.  Use
    that if your guests app is picky and refuses to record from line-in.

Where the data for the record channel comes from is subject to host
configuration.  On a typical linux system it'll probably being
pulseaudio, either directly or indirectly (via spice).

cheers,
  Gerd