|
| From: | Juan Quintela |
| Subject: | Re: [PATCH v2 04/53] migration/rdma: Drop fragile wr_id formatting |
| Date: | Wed, 04 Oct 2023 16:38:22 +0200 |
| User-agent: | Gnus/5.13 (Gnus v5.13) Emacs/28.3 (gnu/linux) |
Markus Armbruster <armbru@redhat.com> wrote: > wrid_desc[] uses 4001 pointers to map four integer values to strings. > > print_wrid() accesses wrid_desc[] out of bounds when passed a negative > argument. It returns null for values 2..1999 and 2001..3999. > > qemu_rdma_poll() and qemu_rdma_block_for_wrid() print wrid_desc[wr_id] > and passes print_wrid(wr_id) to tracepoints. Could conceivably crash > trying to format a null string. I believe access out of bounds is not > possible. > > Not worth cleaning up. Dumb down to show just numeric wr_id. > > Signed-off-by: Markus Armbruster <armbru@redhat.com> > Reviewed-by: Fabiano Rosas <farosas@suse.de> > Reviewed-by: Li Zhijian <lizhijian@fujitsu.com> Reviewed-by: Juan Quintela <quintela@redhat.com>
| [Prev in Thread] | Current Thread | [Next in Thread] |