[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Qemu-devel] [PATCH] aio-win32: avoid out-of-bounds access to the ev
From: |
Stefan Hajnoczi |
Subject: |
Re: [Qemu-devel] [PATCH] aio-win32: avoid out-of-bounds access to the events array |
Date: |
Tue, 16 Sep 2014 11:27:00 +0100 |
User-agent: |
Mutt/1.5.23 (2014-03-12) |
On Mon, Sep 15, 2014 at 02:52:58PM +0200, Paolo Bonzini wrote:
> If ret is WAIT_TIMEOUT and there was an event returned by select(),
> we can write to a location after the end of the array. But in
> that case we can retry the WaitForMultipleObjects call with the
> same set of events, so just move the event[ret - WAIT_OBJECT_0]
> assignment inside the existin conditional.
>
> Reported-by: TeLeMan <address@hidden>
> Signed-off-by: Paolo Bonzini <address@hidden>
> ---
> aio-win32.c | 4 +---
> 1 file changed, 1 insertion(+), 3 deletions(-)
Thanks, applied to my block tree:
https://github.com/stefanha/qemu/commits/block
Stefan
pgpvYoMCXq3Cw.pgp
Description: PGP signature