| commit | b8ab854b27e9b88d9b85b4c572049b29cb96de43 | |
| author | Marc-André Lureau <marcandre.lureau@redhat.com> | |
| Fri, 19 Jun 2015 11:00:32 +0000 (19 13:00 +0200) | ||
| committer | Marc-André Lureau <marcandre.lureau@redhat.com> | |
| Sat, 24 Oct 2015 16:02:48 +0000 (24 18:02 +0200) | ||
| tree | c24663a1ef518d13c922f3013faf1ad088e272ba | treesnapshot (tar.gz zip) |
| parent | c246a62f26e5afa8285b21e641b33456f1e69c99 | commitdiff |
ivhsmem: read do not accept more than sizeof(long)
ivshmem_read() only reads sizeof(long) from the input buffer. Accepting
more could lead to fifo8 abort() on 32bit systems if fifo is not empty.
A following patch will change the protocol to 64-bit little-endian
instead.
Signed-off-by: Marc-André Lureau <marcandre.lureau@redhat.com>
Reviewed-by: Claudio Fontana <claudio.fontana@huawei.com>
ivshmem_read() only reads sizeof(long) from the input buffer. Accepting
more could lead to fifo8 abort() on 32bit systems if fifo is not empty.
A following patch will change the protocol to 64-bit little-endian
instead.
Signed-off-by: Marc-André Lureau <marcandre.lureau@redhat.com>
Reviewed-by: Claudio Fontana <claudio.fontana@huawei.com>
| hw/misc/ivshmem.c | diffblobblamehistory |