diff options
| author | Nicholas Piggin <npiggin@gmail.com> | 2024-11-04 02:09:12 +1000 |
|---|---|---|
| committer | Nicholas Piggin <npiggin@gmail.com> | 2024-11-04 09:14:10 +1000 |
| commit | 07f2770503e24889720028ddf9ef54788ddf3b6d (patch) | |
| tree | ae7f3ff1eb2f5f9900a2f16adca3a62bd8237094 /hw/intc/spapr_xive_kvm.c | |
| parent | 889c5c4c7a32be298aa499a246dbfd0c5fea8a74 (diff) | |
| download | focaccia-qemu-07f2770503e24889720028ddf9ef54788ddf3b6d.tar.gz focaccia-qemu-07f2770503e24889720028ddf9ef54788ddf3b6d.zip | |
ppc/xive: Fix ESB length overflow on 32-bit hosts
The length of this region can be > 32-bits, which overflows size_t on 32-bit hosts. Change to uint64_t. Signed-off-by: Nicholas Piggin <npiggin@gmail.com>
Diffstat (limited to 'hw/intc/spapr_xive_kvm.c')
| -rw-r--r-- | hw/intc/spapr_xive_kvm.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/hw/intc/spapr_xive_kvm.c b/hw/intc/spapr_xive_kvm.c index 5789062379..7a86197fc9 100644 --- a/hw/intc/spapr_xive_kvm.c +++ b/hw/intc/spapr_xive_kvm.c @@ -720,7 +720,7 @@ int kvmppc_xive_connect(SpaprInterruptController *intc, uint32_t nr_servers, { SpaprXive *xive = SPAPR_XIVE(intc); XiveSource *xsrc = &xive->source; - size_t esb_len = xive_source_esb_len(xsrc); + uint64_t esb_len = xive_source_esb_len(xsrc); size_t tima_len = 4ull << TM_SHIFT; CPUState *cs; int fd; @@ -824,7 +824,7 @@ void kvmppc_xive_disconnect(SpaprInterruptController *intc) { SpaprXive *xive = SPAPR_XIVE(intc); XiveSource *xsrc; - size_t esb_len; + uint64_t esb_len; assert(xive->fd != -1); |