qemu-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [PATCH 0/2] use unsigned type for MegasasState fields


From: Philippe Mathieu-Daudé
Subject: Re: [PATCH 0/2] use unsigned type for MegasasState fields
Date: Tue, 12 May 2020 15:42:11 +0200
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.5.0

Cc'ing Marc-André our signed/unsigned conversion expert (with Paolo).

On 5/7/20 12:57 PM, P J P wrote:
From: Prasad J Pandit <address@hidden>

Hello,

* This series fixes an OOB access issue which may occur when a guest user
   sets 's->reply_queue_head' field to a negative(or large positive) value,
   via 'struct mfi_init_qinfo' object in megasas_init_firmware().

Do you have a reproducer?


* Second patch updates other numeric fields of MegasasState to unsigned type.

Thank you.
---
Prasad J Pandit (2):
   megasas: use unsigned type for reply_queue_head
   megasas: use unsigned type for positive numeric fields

  hw/scsi/megasas.c | 40 ++++++++++++++++++++--------------------
  1 file changed, 20 insertions(+), 20 deletions(-)





reply via email to

[Prev in Thread] Current Thread [Next in Thread]