Google Git
Sign in
qemu / qemu / 314b1811c15f4e982e4667d9b845aee4b5a63d91
commit314b1811c15f4e982e4667d9b845aee4b5a63d91[log] [tgz]
authorGerd Hoffmann <kraxel@redhat.com>Wed Mar 10 17:47:17 2010 +0100
committerAnthony Liguori <aliguori@us.ibm.com>Wed Mar 17 11:17:05 2010 -0500
tree238d936e990c1b60386ecf9cc64d896603805191
parent3a0558b519c10f462e2b0eb5bbcdb9aa3d176d93 [diff]
scsi-disk: fix buffer overflow

In case s->version is shorter than 4 bytes we overflow the memcpy src
buffer.  Fix it by clearing the target buffer, then copy only the
amount of bytes we actually have.

Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Signed-off-by: Anthony Liguori <aliguori@us.ibm.com>
1 file changed
tree: 238d936e990c1b60386ecf9cc64d896603805191
  1. audio/
  2. block/
  3. bsd-user/
  4. darwin-user/
  5. default-configs/
  6. docs/
  7. fpu/
  8. gdb-xml/
  9. hw/
  10. linux-user/
  11. net/
  12. pc-bios/
  13. QMP/
  14. roms/
  15. slirp/
  16. sysconfigs/
  17. target-alpha/
  18. target-arm/
  19. target-cris/
  20. target-i386/
  21. target-m68k/
  22. target-microblaze/
  23. target-mips/
  24. target-ppc/
  25. target-s390x/
  26. target-sh4/
  27. target-sparc/
  28. tcg/
  29. tests/
  30. .gitignore
  31. .gitmodules
  32. a.out.h
  33. acl.c
  34. acl.h
  35. aes.c
  36. aes.h
  37. aio.c
  38. alpha-dis.c
  39. alpha.ld
  40. arm-dis.c
  41. arm-semi.c
  42. arm.ld
  43. async.c
  44. balloon.h
  45. block-migration.c
  46. block-migration.h
  47. block.c
  48. block.h
  49. block_int.h
  50. bswap.h
  51. bt-host.c
  52. bt-host.h
  53. bt-vhci.c
  54. buffered_file.c
  55. buffered_file.h
  56. cache-utils.c
  57. cache-utils.h
  58. Changelog
  59. check-qdict.c
  60. check-qfloat.c
  61. check-qint.c
  62. check-qjson.c
  63. check-qlist.c
  64. check-qstring.c
  65. cmd.c
  66. cmd.h
  67. cocoa.m
  68. CODING_STYLE
  69. config.h
  70. configure
  71. console.c
  72. console.h
  73. COPYING
  74. COPYING.LIB
  75. cpu-all.h
  76. cpu-common.h
  77. cpu-defs.h
  78. cpu-exec.c
  79. create_config
  80. cris-dis.c
  81. curses.c
  82. curses_keys.h
  83. cutils.c
  84. d3des.c
  85. d3des.h
  86. def-helper.h
  87. device_tree.c
  88. device_tree.h
  89. dis-asm.h
  90. disas.c
  91. disas.h
  92. dma-helpers.c
  93. dma.h
  94. dyngen-exec.h
  95. elf.h
  96. envlist.c
  97. envlist.h
  98. exec-all.h
  99. exec.c
  100. feature_to_c.sh
  101. gdbstub.c
  102. gdbstub.h
  103. gen-icount.h
  104. host-utils.c
  105. host-utils.h
  106. hpet.h
  107. hppa-dis.c
  108. hppa.ld
  109. hxtool
  110. i386-dis.c
  111. i386.ld
  112. ia64.ld
  113. input.c
  114. ioport-user.c
  115. ioport.c
  116. ioport.h
  117. json-lexer.c
  118. json-lexer.h
  119. json-parser.c
  120. json-parser.h
  121. json-streamer.c
  122. json-streamer.h
  123. keymaps.c
  124. keymaps.h
  125. kvm-all.c
  126. kvm.h
  127. libfdt_env.h
  128. LICENSE
  129. linux-aio.c
  130. m68k-dis.c
  131. m68k-semi.c
  132. m68k.ld
  133. MAINTAINERS
  134. Makefile
  135. Makefile.hw
  136. Makefile.objs
  137. Makefile.target
  138. Makefile.user
  139. microblaze-dis.c
  140. migration-exec.c
  141. migration-fd.c
  142. migration-tcp.c
  143. migration-unix.c
  144. migration.c
  145. migration.h
  146. mips-dis.c
  147. mips.ld
  148. module.c
  149. module.h
  150. monitor.c
  151. monitor.h
  152. nbd.c
  153. nbd.h
  154. net-checksum.c
  155. net.c
  156. net.h
  157. osdep.c
  158. osdep.h
  159. path.c
  160. pci-ids.txt
  161. posix-aio-compat.c
  162. ppc-dis.c
  163. ppc.ld
  164. ppc64.ld
  165. qbool.c
  166. qbool.h
  167. qdict-test-data.txt
  168. qdict.c
  169. qdict.h
  170. qemu-aio.h
  171. qemu-barrier.h
  172. qemu-binfmt-conf.sh
  173. qemu-char.c
  174. qemu-char.h
  175. qemu-common.h
  176. qemu-config.c
  177. qemu-config.h
  178. qemu-doc.texi
  179. qemu-error.c
  180. qemu-error.h
  181. qemu-img-cmds.hx
  182. qemu-img.c
  183. qemu-img.texi
  184. qemu-io.c
  185. qemu-lock.h
  186. qemu-log.h
  187. qemu-malloc.c
  188. qemu-monitor.hx
  189. qemu-nbd.c
  190. qemu-nbd.texi
  191. qemu-objects.h
  192. qemu-option.c
  193. qemu-option.h
  194. qemu-options.hx
  195. qemu-queue.h
  196. qemu-sockets.c
  197. qemu-tech.texi
  198. qemu-thread.c
  199. qemu-thread.h
  200. qemu-timer.c
  201. qemu-timer.h
  202. qemu-tool.c
  203. qemu-x509.h
  204. qemu.sasl
  205. qemu_socket.h
  206. qerror.c
  207. qerror.h
  208. qfloat.c
  209. qfloat.h
  210. qint.c
  211. qint.h
  212. qjson.c
  213. qjson.h
  214. qlist.c
  215. qlist.h
  216. qobject.h
  217. qstring.c
  218. qstring.h
  219. readline.c
  220. readline.h
  221. README
  222. rules.mak
  223. rwhandler.c
  224. rwhandler.h
  225. s390-dis.c
  226. s390.ld
  227. savevm.c
  228. sdl.c
  229. sdl_keysym.h
  230. sdl_zoom.c
  231. sdl_zoom.h
  232. sdl_zoom_template.h
  233. sh4-dis.c
  234. softmmu-semi.h
  235. softmmu_defs.h
  236. softmmu_exec.h
  237. softmmu_header.h
  238. softmmu_template.h
  239. sparc-dis.c
  240. sparc.ld
  241. sparc64.ld
  242. sysemu.h
  243. targphys.h
  244. tcg-runtime.c
  245. texi2pod.pl
  246. thunk.c
  247. thunk.h
  248. TODO
  249. translate-all.c
  250. uboot_image.h
  251. usb-bsd.c
  252. usb-linux.c
  253. usb-stub.c
  254. VERSION
  255. vgafont.h
  256. vl.c
  257. vnc-auth-sasl.c
  258. vnc-auth-sasl.h
  259. vnc-auth-vencrypt.c
  260. vnc-auth-vencrypt.h
  261. vnc-tls.c
  262. vnc-tls.h
  263. vnc.c
  264. vnc.h
  265. vnc_keysym.h
  266. vnchextile.h
  267. x86_64.ld
  268. x_keymap.c
  269. x_keymap.h