motorhead/qemu
1
0
Fork 0
mirror of https://github.com/Motorhead1991/qemu.git synced 2025-08-07 17:53:56 -06:00
Code Issues Projects Releases Packages Wiki Activity Actions

linux-user: make bogus negative iovec lengths fail EINVAL

Browse source 
If the guest passes us a bogus negative length for an iovec, fail
EINVAL rather than proceeding blindly forward. This fixes some of
the error cases tests for readv and writev in the LTP.

Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
Reviewed-by: Richard Henderson <rth@twiddle.net>
Signed-off-by: Riku Voipio <riku.voipio@linaro.org>
This commit is contained in:
Peter Maydell 2013-02-08 07:58:41 +00:00 • committed by Riku Voipio
parent 63ec54d7b3
commit dfae8e00f8
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
linux-user/syscall.c
View file

@ -1776,7 +1776,7 @@ static struct iovec *lock_iovec(int type, abi_ulong target_addr,
errno = 0; errno = 0;
return NULL; return NULL;
} }
if (count > IOV_MAX) { if (count < 0 || count > IOV_MAX) {
errno = EINVAL; errno = EINVAL;
return NULL; return NULL;
} }