diff options
| author | Stefan Weil <sw@weilnetz.de> | 2024-09-10 07:41:38 +0200 |
|---|---|---|
| committer | Peter Xu <peterx@redhat.com> | 2024-09-18 14:27:24 -0400 |
| commit | cb0ed522a51a7d4b1fde535972d4aeeb82447928 (patch) | |
| tree | 3726927103ab1fa3f1fc3618c511eed70ed97f1c | |
| parent | 561ce0149373ecab7fa123cb64ffd50155c06e10 (diff) | |
| download | qemu-cb0ed522a51a7d4b1fde535972d4aeeb82447928.zip qemu-cb0ed522a51a7d4b1fde535972d4aeeb82447928.tar.gz qemu-cb0ed522a51a7d4b1fde535972d4aeeb82447928.tar.bz2 | |
migration/multifd: Fix loop conditions in multifd_zstd_send_prepare and multifd_zstd_recv
GitHub's CodeQL reports four critical errors which are fixed by this commit:
Unsigned difference expression compared to zero
An expression (u - v > 0) with unsigned values u, v is only false if u == v,
so all changed expressions did not work as expected.
Signed-off-by: Stefan Weil <sw@weilnetz.de>
Link: https://lore.kernel.org/r/20240910054138.1458555-1-sw@weilnetz.de
[peterx: Fix mangled email for author]
Signed-off-by: Peter Xu <peterx@redhat.com>
| -rw-r--r-- | migration/multifd-zstd.c | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/migration/multifd-zstd.c b/migration/multifd-zstd.c index 53da33e..abed140 100644 --- a/migration/multifd-zstd.c +++ b/migration/multifd-zstd.c @@ -123,9 +123,9 @@ static int multifd_zstd_send_prepare(MultiFDSendParams *p, Error **errp) */ do { ret = ZSTD_compressStream2(z->zcs, &z->out, &z->in, flush); - } while (ret > 0 && (z->in.size - z->in.pos > 0) - && (z->out.size - z->out.pos > 0)); - if (ret > 0 && (z->in.size - z->in.pos > 0)) { + } while (ret > 0 && (z->in.size > z->in.pos) + && (z->out.size > z->out.pos)); + if (ret > 0 && (z->in.size > z->in.pos)) { error_setg(errp, "multifd %u: compressStream buffer too small", p->id); return -1; @@ -243,7 +243,7 @@ static int multifd_zstd_recv(MultiFDRecvParams *p, Error **errp) */ do { ret = ZSTD_decompressStream(z->zds, &z->out, &z->in); - } while (ret > 0 && (z->in.size - z->in.pos > 0) + } while (ret > 0 && (z->in.size > z->in.pos) && (z->out.pos < page_size)); if (ret > 0 && (z->out.pos < page_size)) { error_setg(errp, "multifd %u: decompressStream buffer too small", |