| commit | 314b1811c15f4e982e4667d9b845aee4b5a63d91 | |
| author | Gerd Hoffmann <kraxel@redhat.com> | |
| Wed, 10 Mar 2010 16:47:17 +0000 (10 17:47 +0100) | ||
| committer | Anthony Liguori <aliguori@us.ibm.com> | |
| Wed, 17 Mar 2010 16:17:05 +0000 (17 11:17 -0500) | ||
| tree | 238d936e990c1b60386ecf9cc64d896603805191 | treesnapshot (tar.gz zip) |
| parent | 3a0558b519c10f462e2b0eb5bbcdb9aa3d176d93 | commitdiff |
scsi-disk: fix buffer overflow
In case s->version is shorter than 4 bytes we overflow the memcpy src
buffer. Fix it by clearing the target buffer, then copy only the
amount of bytes we actually have.
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Signed-off-by: Anthony Liguori <aliguori@us.ibm.com>
In case s->version is shorter than 4 bytes we overflow the memcpy src
buffer. Fix it by clearing the target buffer, then copy only the
amount of bytes we actually have.
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Signed-off-by: Anthony Liguori <aliguori@us.ibm.com>
| hw/scsi-disk.c | diffblobblamehistory |