diff options
| author | Marc-André Lureau <marcandre.lureau@redhat.com> | 2015-06-19 13:00:32 +0200 |
|---|---|---|
| committer | Marc-André Lureau <marcandre.lureau@redhat.com> | 2015-10-24 18:02:48 +0200 |
| commit | b8ab854b27e9b88d9b85b4c572049b29cb96de43 (patch) | |
| tree | c24663a1ef518d13c922f3013faf1ad088e272ba /hw/misc | |
| parent | c246a62f26e5afa8285b21e641b33456f1e69c99 (diff) | |
| download | hqemu-b8ab854b27e9b88d9b85b4c572049b29cb96de43.zip hqemu-b8ab854b27e9b88d9b85b4c572049b29cb96de43.tar.gz | |
ivhsmem: read do not accept more than sizeof(long)
ivshmem_read() only reads sizeof(long) from the input buffer. Accepting
more could lead to fifo8 abort() on 32bit systems if fifo is not empty.
A following patch will change the protocol to 64-bit little-endian
instead.
Signed-off-by: Marc-André Lureau <marcandre.lureau@redhat.com>
Reviewed-by: Claudio Fontana <claudio.fontana@huawei.com>
Diffstat (limited to 'hw/misc')
| -rw-r--r-- | hw/misc/ivshmem.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/hw/misc/ivshmem.c b/hw/misc/ivshmem.c index cc76989..fb53b3f 100644 --- a/hw/misc/ivshmem.c +++ b/hw/misc/ivshmem.c @@ -272,7 +272,7 @@ static void ivshmem_receive(void *opaque, const uint8_t *buf, int size) static int ivshmem_can_receive(void * opaque) { - return 8; + return sizeof(long); } static void ivshmem_event(void *opaque, int event) |
