|
| From: | Gerd Hoffmann |
| Subject: | Re: [Qemu-devel] [PATCH v5 23/24] usb: sanity check setup_index+setup_len in post_load |
| Date: | Mon, 07 Apr 2014 09:14:13 +0200 |
On Do, 2014-04-03 at 19:52 +0300, Michael S. Tsirkin wrote:
> - if (dev->setup_index >= sizeof(dev->data_buf) ||
> + if (dev->setup_index < 0 ||
> + dev->setup_len < 0 ||
> + dev->setup_index >= sizeof(dev->data_buf) ||
> dev->setup_len >= sizeof(dev->data_buf)) {
> return -EINVAL;
> }
Reviewed-by: Gerd Hoffmann <address@hidden>
| [Prev in Thread] | Current Thread | [Next in Thread] |