summaryrefslogtreecommitdiffstats
path: root/hw/virtio.c
diff options
context:
space:
mode:
authorMichael S. Tsirkin2012-09-24 15:09:30 +0200
committerMichael S. Tsirkin2012-09-28 12:16:27 +0200
commit0cea71a207508c2b8f563b2644ac46009832c8f4 (patch)
tree34dc05b002e841ab4722bfd15516b908d071f26a /hw/virtio.c
parentMerge branch 'arm-devs.for-upstream' of git://git.linaro.org/people/pmaydell/... (diff)
downloadqemu-0cea71a207508c2b8f563b2644ac46009832c8f4.tar.gz
qemu-0cea71a207508c2b8f563b2644ac46009832c8f4.tar.xz
qemu-0cea71a207508c2b8f563b2644ac46009832c8f4.zip
virtio: don't mark unaccessed memory as dirty
offset of accessed buffer is calculated using iov_length, so it can exceed accessed len. If that happens math in len - offset wraps around, and size becomes wrong. As real value is 0, so this is harmless but unnecessary. Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Diffstat (limited to 'hw/virtio.c')
-rw-r--r--hw/virtio.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/hw/virtio.c b/hw/virtio.c
index 209c763751..b5764bb8f7 100644
--- a/hw/virtio.c
+++ b/hw/virtio.c
@@ -241,7 +241,7 @@ void virtqueue_fill(VirtQueue *vq, const VirtQueueElement *elem,
elem->in_sg[i].iov_len,
1, size);
- offset += elem->in_sg[i].iov_len;
+ offset += size;
}
for (i = 0; i < elem->out_num; i++)