diff options
| author | Alex Williamson | 2015-01-09 16:50:53 +0100 |
|---|---|---|
| committer | Alex Williamson | 2015-01-09 16:50:53 +0100 |
| commit | 29c6e6df492d81b1843e5dd999171bb84c6effea (patch) | |
| tree | c44463c337e892638b5031e542059989ffef8e3e /hw/net/pcnet-pci.c | |
| parent | hw/ppc/mac_newworld: simplify usb controller creation logic (diff) | |
| download | qemu-29c6e6df492d81b1843e5dd999171bb84c6effea.tar.gz qemu-29c6e6df492d81b1843e5dd999171bb84c6effea.tar.xz qemu-29c6e6df492d81b1843e5dd999171bb84c6effea.zip | |
vfio-pci: Fix BAR size overflow
We use an unsigned int when working with the PCI BAR size, which can
obviously overflow if the BAR is 4GB or larger. This needs to change
to a fixed length uint64_t. A similar issue is possible, though even
more unlikely, when mapping the region above an MSI-X table. The
start of the MSI-X vector table must be below 4GB, but the end, and
therefore the start of the next mapping region, could still land at
4GB.
Suggested-by: Nishank Trivedi <nishank.trivedi@netapp.com>
Signed-off-by: Alex Williamson <alex.williamson@redhat.com>
Reviewed-by: Don Slutz <dslutz@verizon.com>
Tested-by: Alexey Kardashevskiy <aik@ozlabs.ru>
Diffstat (limited to 'hw/net/pcnet-pci.c')
0 files changed, 0 insertions, 0 deletions