[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Qemu-devel] [PATCH 5/7] exec.c: Fix off-by-one error in register_subpag
From: |
Stefan Hajnoczi |
Subject: |
[Qemu-devel] [PATCH 5/7] exec.c: Fix off-by-one error in register_subpage |
Date: |
Fri, 3 Aug 2012 11:51:04 +0100 |
From: Tyler Hall <address@hidden>
subpage_register() expects "end" to be the last byte in the mapping.
Registering a non-page-aligned memory region that extends up to or
beyond a page boundary causes subpage_register() to silently fail
through the (end >= PAGE_SIZE) check.
This bug does not cause noticeable problems for mappings that do not
extend to a page boundary, though they do register an extra byte.
Signed-off-by: Tyler Hall <address@hidden>
Reviewed-by: Peter Maydell <address@hidden>
Reviewed-by: Avi Kivity <address@hidden>
Signed-off-by: Stefan Hajnoczi <address@hidden>
---
exec.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/exec.c b/exec.c
index feb4795..27b100c 100644
--- a/exec.c
+++ b/exec.c
@@ -2271,7 +2271,7 @@ static void register_subpage(MemoryRegionSection *section)
subpage = container_of(existing->mr, subpage_t, iomem);
}
start = section->offset_within_address_space & ~TARGET_PAGE_MASK;
- end = start + section->size;
+ end = start + section->size - 1;
subpage_register(subpage, start, end, phys_section_add(section));
}
--
1.7.10.4
- [Qemu-devel] [PULL 0/7] Trivial patches for 22 July to 3 August 2012, Stefan Hajnoczi, 2012/08/03
- [Qemu-devel] [PATCH 3/7] remove unused include of error.h, Stefan Hajnoczi, 2012/08/03
- [Qemu-devel] [PATCH 2/7] qom: Clean libuser object and dependency files, Stefan Hajnoczi, 2012/08/03
- [Qemu-devel] [PATCH 1/7] usb: Clean common object and dependency files, Stefan Hajnoczi, 2012/08/03
- [Qemu-devel] [PATCH 5/7] exec.c: Fix off-by-one error in register_subpage,
Stefan Hajnoczi <=
- [Qemu-devel] [PATCH 7/7] exec.c: Remove out of date comment, Stefan Hajnoczi, 2012/08/03
- [Qemu-devel] [PATCH 6/7] exec.c: Use subpages for large unaligned mappings, Stefan Hajnoczi, 2012/08/03
- [Qemu-devel] [PATCH 4/7] socket: clean up redundant assignment, Stefan Hajnoczi, 2012/08/03
- Re: [Qemu-devel] [PULL 0/7] Trivial patches for 22 July to 3 August 2012, Stefan Hajnoczi, 2012/08/03