fix: buffer overflow in DMA report generator

Signed-off-by: William Henderson <william.henderson@nutanix.com>

1 files changed, 2 insertions, 1 deletions

diff --git a/lib/dma.c b/lib/dma.c
index 79bfd7d..ce3217d 100644
--- a/lib/dma.c
+++ b/lib/dma.c
@@ -629,7 +629,8 @@ dma_controller_dirty_page_get(dma_controller_t *dma, vfu_dma_addr_t addr,
 
     bit = 0;
 
-    for (i = 0; i < (size_t)bitmap_size; i++) {
+    for (i = 0; i < (size_t)bitmap_size &&
+         bit / 8 < (size_t)converted_bitmap_size; i++) {
         uint8_t val = region->dirty_bitmap[i];
         uint8_t *outp = (uint8_t *)&bitmap[i];
         uint8_t out = 0;