diff options
| author | Gonglei <arei.gonglei@huawei.com> | 2014-11-20 19:35:02 +0800 |
|---|---|---|
| committer | Stefan Hajnoczi <stefanha@redhat.com> | 2014-11-21 10:50:54 +0000 |
| commit | 7b50d00911ddd6d56a766ac5671e47304c20a21b (patch) | |
| tree | b2ac5239d4f3f80cfd5609b5c8dbb33063e11957 /qemu-io-cmds.c | |
| parent | 8db804ac412010fc96397c2d67ee6417eccd9d34 (diff) | |
| download | qemu-7b50d00911ddd6d56a766ac5671e47304c20a21b.tar.gz | |
pcnet: fix Negative array index read
s->xmit_pos maybe assigned to a negative value (-1),
but in this branch variable s->xmit_pos as an index to
array s->buffer. Let's add a check for s->xmit_pos.
Signed-off-by: Gonglei <arei.gonglei@huawei.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Reviewed-by: Jason Wang <jasowang@redhat.com>
Reviewed-by: Jason Wang <jasowang@redhat.com>
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
Diffstat (limited to 'qemu-io-cmds.c')
0 files changed, 0 insertions, 0 deletions