github/acrn-hypervisor
1
0
Fork 0
mirror of https://github.com/projectacrn/acrn-hypervisor.git synced 2025-06-19 12:12:16 +00:00
Code Issues Projects Releases Wiki Activity

hv:fix possible buffer overflow in 'ptirq_get_intr_data()'

Browse Source 
- 'buffer'with size of 'buffer_cnt',  will overflow in
    next loop if 'index == buffer_cnt - 1'.

Tracked-On: #1252
Signed-off-by: Yonghua Huang <yonghua.huang@intel.com>
Acked-by: Eddie Dong <eddie.dong@intel.com>
This commit is contained in:
Yonghua Huang 2018-12-18 21:27:36 +08:00 committed by wenlingz
parent 6aa4227277
commit b8ffac8bac
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
hypervisor/common/ptdev.c
View File

@ -229,7 +229,7 @@ uint32_t ptirq_get_intr_data(const struct acrn_vm *target_vm, uint64_t *buffer,
buffer[index + 1U] = entry->intr_count; buffer[index + 1U] = entry->intr_count;
index += 2U; index += 2U;
if (index >= buffer_cnt) { if (index > (buffer_cnt - 2U)) {
break; break;
} }
} }