summary refs log tree commit diff stats
path: root/hw/display/vhost-user-gpu.c
diff options
context:
space:
mode:
authorEric Blake <eblake@redhat.com>2021-02-09 09:23:50 -0600
committerLaurent Vivier <laurent@vivier.eu>2021-03-09 21:21:54 +0100
commite91bae8e98a6438156752dfbe9c0e2494d4b80f6 (patch)
tree668216b4d43f0f9ec607e7245773d0927ce446b7 /hw/display/vhost-user-gpu.c
parentcba42d61a379bc1c983ddb39d479de3581d2d578 (diff)
downloadfocaccia-qemu-e91bae8e98a6438156752dfbe9c0e2494d4b80f6.tar.gz
focaccia-qemu-e91bae8e98a6438156752dfbe9c0e2494d4b80f6.zip
scsi: Silence gcc warning
On Fedora 33, gcc 10.2.1 notes that scsi_cdb_length(buf) can set
len==-1, which in turn overflows g_malloc():

[5/5] Linking target qemu-system-x86_64
In function ‘scsi_disk_new_request_dump’,
    inlined from ‘scsi_new_request’ at ../hw/scsi/scsi-disk.c:2608:9:
../hw/scsi/scsi-disk.c:2582:19: warning: argument 1 value ‘18446744073709551612’ exceeds maximum object size 9223372036854775807 [-Walloc-size-larger-than=]
 2582 |     line_buffer = g_malloc(len * 5 + 1);
      |                   ^

Silence it with a decent assertion, since we only convert a buffer to
bytes when we have a valid cdb length.

Signed-off-by: Eric Blake <eblake@redhat.com>
Reviewed-by: Philippe Mathieu-Daudé <philmd@redhat.com>
Message-Id: <20210209152350.207958-1-eblake@redhat.com>
Signed-off-by: Laurent Vivier <laurent@vivier.eu>
Diffstat (limited to 'hw/display/vhost-user-gpu.c')
0 files changed, 0 insertions, 0 deletions