[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Qemu-trivial] [PULL 02/47] xen-pt: fix Out-of-bounds read
From: |
Michael Tokarev |
Subject: |
[Qemu-trivial] [PULL 02/47] xen-pt: fix Out-of-bounds read |
Date: |
Wed, 4 Mar 2015 20:06:19 +0300 |
From: Gonglei <address@hidden>
The array length of s->real_device.io_regions[] is
"PCI_NUM_REGIONS - 1".
Signed-off-by: Gonglei <address@hidden>
Acked-by: Stefano Stabellini <address@hidden>
Signed-off-by: Michael Tokarev <address@hidden>
---
hw/xen/xen_pt_config_init.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/hw/xen/xen_pt_config_init.c b/hw/xen/xen_pt_config_init.c
index 710fe50..d99c22e 100644
--- a/hw/xen/xen_pt_config_init.c
+++ b/hw/xen/xen_pt_config_init.c
@@ -438,7 +438,7 @@ static int xen_pt_bar_reg_read(XenPCIPassthroughState *s,
XenPTReg *cfg_entry,
/* get BAR index */
index = xen_pt_bar_offset_to_index(reg->offset);
- if (index < 0 || index >= PCI_NUM_REGIONS) {
+ if (index < 0 || index >= PCI_NUM_REGIONS - 1) {
XEN_PT_ERR(&s->dev, "Internal error: Invalid BAR index [%d].\n",
index);
return -1;
}
--
2.1.4
- [Qemu-trivial] [PULL 00/47] Trivial patches for 2015-03-04, Michael Tokarev, 2015/03/04
- [Qemu-trivial] [PULL 12/47] block: remove superfluous '\n' around error_report/error_setg, Michael Tokarev, 2015/03/04
- [Qemu-trivial] [PULL 02/47] xen-pt: fix Out-of-bounds read,
Michael Tokarev <=
- [Qemu-trivial] [PULL 04/47] memsave: Improve and disambiguate error message, Michael Tokarev, 2015/03/04
- [Qemu-trivial] [PULL 19/47] xtensa: Remove superfluous '\n' around error_report(), Michael Tokarev, 2015/03/04
- [Qemu-trivial] [PULL 05/47] smbios: document cmdline options for smbios type 2-4, 17 structures, Michael Tokarev, 2015/03/04
- [Qemu-trivial] [PULL 40/47] disas/cris: Fix warning caused by missing 'static' attribute, Michael Tokarev, 2015/03/04
- [Qemu-trivial] [PULL 17/47] vhost-scsi: Remove superfluous '\n' around error_report(), Michael Tokarev, 2015/03/04
- [Qemu-trivial] [PULL 39/47] disas/arm: Fix warnings caused by missing 'static' attribute, Michael Tokarev, 2015/03/04
- [Qemu-trivial] [PULL 10/47] qerror.h: Swap definitions that were not in alphabetical order, Michael Tokarev, 2015/03/04
- [Qemu-trivial] [PULL 15/47] numa: remove superfluous '\n' around error_setg, Michael Tokarev, 2015/03/04
- [Qemu-trivial] [PULL 36/47] gitignore: Ignore new tests, Michael Tokarev, 2015/03/04
- [Qemu-trivial] [PULL 06/47] migration/rdma: clean up qemu_rdma_dest_init a bit, Michael Tokarev, 2015/03/04