| commit | 14cec170ea4724e6881ba2febb20e88a942e52d3 | |
| author | Gonglei <arei.gonglei@huawei.com> | |
| Tue, 10 Feb 2015 07:51:23 +0000 (10 15:51 +0800) | ||
| committer | Michael Tokarev <mjt@tls.msk.ru> | |
| Tue, 10 Mar 2015 05:15:33 +0000 (10 08:15 +0300) | ||
| tree | 04bd2ae2b873316ae57988444813686806a405f1 | treesnapshot (tar.gz zip) |
| parent | d4cd45028898a37afb45fb449954115b4960d4e9 | commitdiff |
xen-pt: fix Out-of-bounds read
The array length of s->real_device.io_regions[] is
"PCI_NUM_REGIONS - 1".
Signed-off-by: Gonglei <arei.gonglei@huawei.com>
Acked-by: Stefano Stabellini <stefano.stabellini@eu.citrix.com>
Signed-off-by: Michael Tokarev <mjt@tls.msk.ru>
The array length of s->real_device.io_regions[] is
"PCI_NUM_REGIONS - 1".
Signed-off-by: Gonglei <arei.gonglei@huawei.com>
Acked-by: Stefano Stabellini <stefano.stabellini@eu.citrix.com>
Signed-off-by: Michael Tokarev <mjt@tls.msk.ru>
| hw/xen/xen_pt_config_init.c | diffblobblamehistory |