diff options
author | Michael S. Tsirkin <mst@redhat.com> | 2010-07-12 20:24:59 +0300 |
---|---|---|
committer | Michael S. Tsirkin <mst@redhat.com> | 2010-07-19 13:49:19 +0300 |
commit | b0b900070c7cb29bbefb732ec00397abe5de6d73 (patch) | |
tree | cdf5929f0575af0eb10a701564f79c12004bef58 /hw/soc_dma.h | |
parent | d67eb20f6a387a10475b945c9e91fe2a00cffd93 (diff) | |
download | hqemu-b0b900070c7cb29bbefb732ec00397abe5de6d73.zip hqemu-b0b900070c7cb29bbefb732ec00397abe5de6d73.tar.gz |
e1000: fix access 4 bytes beyond buffer end
We do range check for size, and get size as buffer,
but copy size + 4 bytes (4 is for FCS).
Let's copy size bytes but put size + 4 in length.
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Diffstat (limited to 'hw/soc_dma.h')
0 files changed, 0 insertions, 0 deletions