diff options
| author | Michael S. Tsirkin | 2015-11-19 14:14:07 +0100 |
|---|---|---|
| committer | Michael S. Tsirkin | 2015-11-19 14:26:00 +0100 |
| commit | d9a3b33d2c9f996537b7f1d0246dee2d0120cefb (patch) | |
| tree | bb329b309036a52dda07e4aa184c0564cc7fb1d6 /tests | |
| parent | vhost-user: fix log size (diff) | |
| download | qemu-d9a3b33d2c9f996537b7f1d0246dee2d0120cefb.tar.gz qemu-d9a3b33d2c9f996537b7f1d0246dee2d0120cefb.tar.xz qemu-d9a3b33d2c9f996537b7f1d0246dee2d0120cefb.zip | |
acpi: fix buffer overrun on migration
ich calls acpi_gpe_init with length ICH9_PMIO_GPE0_LEN so
ICH9_PMIO_GPE0_LEN/2 bytes are allocated, but then the full
ICH9_PMIO_GPE0_LEN bytes are migrated.
As a quick work-around, allocate twice the memory.
We'll probably want to tweak code to avoid
migrating the extra ICH9_PMIO_GPE0_LEN/2 bytes,
but that is a bit trickier to do without breaking
migration compatibility.
Tested-by: "Dr. David Alan Gilbert" <dgilbert@redhat.com>
Reported-by: "Dr. David Alan Gilbert" <dgilbert@redhat.com>
Cc: qemu-stable@nongnu.org
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Diffstat (limited to 'tests')
0 files changed, 0 insertions, 0 deletions