diff options
| author | Corey Minyard | 2022-08-01 00:58:09 +0200 |
|---|---|---|
| committer | Corey Minyard | 2022-08-01 13:40:50 +0200 |
| commit | 3fde641e7286f9b968bdb3b4b922c6465f2a9abc (patch) | |
| tree | 93976fc3c0c606515221aae4f182e635aa29bc2f /tests/tcg/multiarch/linux/linux-test.c | |
| parent | Merge tag 'pull-ppc-20220728' of https://gitlab.com/danielhb/qemu into staging (diff) | |
| download | qemu-3fde641e7286f9b968bdb3b4b922c6465f2a9abc.tar.gz qemu-3fde641e7286f9b968bdb3b4b922c6465f2a9abc.tar.xz qemu-3fde641e7286f9b968bdb3b4b922c6465f2a9abc.zip | |
ipmi:smbus: Add a check around a memcpy
In one case:
memcpy(sid->inmsg + sid->inlen, buf, len);
if len == 0 then sid->inmsg + sig->inlen can point to one past the inmsg
array if the array is full. We have to allow len == 0 due to some
vagueness in the spec, but we don't have to call memcpy.
Found by Coverity. This is not a problem in practice, but the results
are technically (maybe) undefined. So make Coverity happy.
Reported-by: Peter Maydell <peter.maydell@linaro.org>
Signed-off-by: Corey Minyard <cminyard@mvista.com>
Acked-by: Michael S. Tsirkin <mst@redhat.com>
Reviewed-by: Peter Maydell <peter.maydell@linaro.org>
Diffstat (limited to 'tests/tcg/multiarch/linux/linux-test.c')
0 files changed, 0 insertions, 0 deletions