| commit | e497e6a55786a62ffe009a3fe2fa6d40e6080210 | |
| author | Paolo Bonzini <pbonzini@redhat.com> | |
| Sun, 31 Mar 2024 18:04:41 +0000 (31 20:04 +0200) | ||
| committer | Paolo Bonzini <pbonzini@redhat.com> | |
| Tue, 2 Apr 2024 16:08:59 +0000 (2 18:08 +0200) | ||
| tree | 63d9a35821dfdfaa5ce4d3ca25f5a6d2a50ba61b | treesnapshot (tar.gz zip) |
| parent | 1d1ee7e0a1b7041804e8c5f8c2453fdc2df0407e | commitdiff |
lsi53c895a: avoid out of bounds access to s->msg[]
If no bytes are there to process in the message in phase,
the input data latch (s->sidl) is set to s->msg[-1]. Just
do nothing since no DMA is performed.
Reported-by: Chuhong Yuan <hslester96@gmail.com>
Reviewed-by: Philippe Mathieu-Daudé <philmd@linaro.org>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
If no bytes are there to process in the message in phase,
the input data latch (s->sidl) is set to s->msg[-1]. Just
do nothing since no DMA is performed.
Reported-by: Chuhong Yuan <hslester96@gmail.com>
Reviewed-by: Philippe Mathieu-Daudé <philmd@linaro.org>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
| hw/scsi/lsi53c895a.c | diffblobblamehistory |