diff options
| author | Prasad J Pandit <pjp@fedoraproject.org> | 2016-07-27 21:07:56 +0530 |
|---|---|---|
| committer | Michael S. Tsirkin <mst@redhat.com> | 2016-07-29 00:07:10 +0300 |
| commit | 1e7aed70144b4673fc26e73062064b6724795e5f (patch) | |
| tree | d6cf8775d16eeb42d4e292a33568b9715fedae63 /hw/misc/imx6_src.c | |
| parent | 9a4c0e220d8a4f82b5665d0ee95ef94d8e1509d5 (diff) | |
| download | focaccia-qemu-1e7aed70144b4673fc26e73062064b6724795e5f.tar.gz focaccia-qemu-1e7aed70144b4673fc26e73062064b6724795e5f.zip | |
virtio: check vring descriptor buffer length
virtio back end uses set of buffers to facilitate I/O operations. An infinite loop unfolds in virtqueue_pop() if a buffer was of zero size. Add check to avoid it. Reported-by: Li Qiang <liqiang6-s@360.cn> Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org> Reviewed-by: Michael S. Tsirkin <mst@redhat.com> Signed-off-by: Michael S. Tsirkin <mst@redhat.com> Reviewed-by: Stefan Hajnoczi <stefanha@redhat.com>
Diffstat (limited to 'hw/misc/imx6_src.c')
0 files changed, 0 insertions, 0 deletions