projects / qemu.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 01a5797) | patch
spapr: Fix integer overflow during migration (TCG)
authorSamuel Mendoza-Jonas <sam.mj@au1.ibm.com>
Mon, 17 Nov 2014 04:12:29 +0000 (15:12 +1100)
committerAlexander Graf <agraf@suse.de>
Wed, 7 Jan 2015 15:16:26 +0000 (16:16 +0100)
commit338c25b6929b5436a42aaa106c7e9136cf1ff4dc
tree1878b0cf554ee790bfc8528ac5f737119273d7f9tree | snapshot
parent01a579729b2e614bd02b25c8504976eeecb64effcommit | diff
spapr: Fix integer overflow during migration (TCG)

The n_valid and n_invalid fields are unsigned short integers but it is
possible to have more than 65535 entries in a contiguous hunk, overflowing
the field. This results in an incorrect HTAB being sent to the destination
during migration.

Signed-off-by: Samuel Mendoza-Jonas <sam.mj@au1.ibm.com>
Reviewed-by: Alexey Kardashevskiy <aik@ozlabs.ru>
Signed-off-by: Alexander Graf <agraf@suse.de>
hw/ppc/spapr.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.