summary refs log tree commit diff stats
path: root/hw/virtio.c
diff options
context:
space:
mode:
authorMichael S. Tsirkin <mst@redhat.com>2012-09-24 15:09:30 +0200
committerMichael S. Tsirkin <mst@redhat.com>2012-09-28 12:16:27 +0200
commit0cea71a207508c2b8f563b2644ac46009832c8f4 (patch)
tree34dc05b002e841ab4722bfd15516b908d071f26a /hw/virtio.c
parent6f8fd2530e9a530f237240daf1c981fa5df7f978 (diff)
downloadfocaccia-qemu-0cea71a207508c2b8f563b2644ac46009832c8f4.tar.gz
focaccia-qemu-0cea71a207508c2b8f563b2644ac46009832c8f4.zip
virtio: don't mark unaccessed memory as dirty
offset of accessed buffer is calculated using iov_length, so it
can exceed accessed len. If that happens
math in len - offset wraps around, and size becomes wrong.
As real value is 0, so this is harmless but unnecessary.

Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Diffstat (limited to 'hw/virtio.c')
-rw-r--r--hw/virtio.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/hw/virtio.c b/hw/virtio.c
index 209c763751..b5764bb8f7 100644
--- a/hw/virtio.c
+++ b/hw/virtio.c
@@ -241,7 +241,7 @@ void virtqueue_fill(VirtQueue *vq, const VirtQueueElement *elem,
                                   elem->in_sg[i].iov_len,
                                   1, size);
 
-        offset += elem->in_sg[i].iov_len;
+        offset += size;
     }
 
     for (i = 0; i < elem->out_num; i++)