| commit | f9e98e5d7a67367b862941e339a98b8322fa0cea | |
| author | Stefano Stabellini <stefano.stabellini@eu.citrix.com> | |
| Fri, 18 Dec 2015 15:09:58 +0000 (18 15:09 +0000) | ||
| committer | Stefano Stabellini <stefano.stabellini@eu.citrix.com> | |
| Fri, 18 Dec 2015 15:09:58 +0000 (18 15:09 +0000) | ||
| tree | 8139588be82cb11f0f6d0720833d577db7b57f07 | treesnapshot (tar.gz zip) |
| parent | 18f49881cf8359e89396aac12f5d3cf3f8a632ba | commitdiff |
xen/blkif: Avoid double access to src->nr_segments
src is stored in shared memory and src->nr_segments is dereferenced
twice at the end of the function. If a compiler decides to compile this
into two separate memory accesses then the size limitation could be
bypassed.
Fix it by removing the double access to src->nr_segments.
This is part of XSA-155.
Signed-off-by: Stefano Stabellini <stefano.stabellini@eu.citrix.com>
src is stored in shared memory and src->nr_segments is dereferenced
twice at the end of the function. If a compiler decides to compile this
into two separate memory accesses then the size limitation could be
bypassed.
Fix it by removing the double access to src->nr_segments.
This is part of XSA-155.
Signed-off-by: Stefano Stabellini <stefano.stabellini@eu.citrix.com>
| hw/block/xen_blkif.h | diffblobblamehistory |