Code injection

hw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop...