aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorBlue Swirl <blauwirbel@gmail.com>2011-01-12 21:12:31 +0000
committerBlue Swirl <blauwirbel@gmail.com>2011-01-12 21:12:31 +0000
commit4508d81a788f451c83604e1d0033243e191d71a7 (patch)
tree757bbf683e32be245bd3d9c760501e80ea667850
parentc46a3ea025b147d58e4c7a222307ccba1e9e376f (diff)
downloadqemu-4508d81a788f451c83604e1d0033243e191d71a7.zip
qemu-4508d81a788f451c83604e1d0033243e191d71a7.tar.gz
qemu-4508d81a788f451c83604e1d0033243e191d71a7.tar.bz2
ppc405_uc: fix a buffer overflow
Fix a buffer overflow, reported by cppcheck: [/src/qemu/hw/ppc405_uc.c:72]: (error) Buffer access out-of-bounds: bd.bi_s_version The use of field bi_s_version seems to be a typo, it should be bi_r_version. Signed-off-by: Blue Swirl <blauwirbel@gmail.com>
-rw-r--r--hw/ppc405_uc.c5
1 files changed, 3 insertions, 2 deletions
diff --git a/hw/ppc405_uc.c b/hw/ppc405_uc.c
index 8136cb9..334187e 100644
--- a/hw/ppc405_uc.c
+++ b/hw/ppc405_uc.c
@@ -68,8 +68,9 @@ ram_addr_t ppc405_set_bootinfo (CPUState *env, ppc4xx_bd_info_t *bd,
stl_phys(bdloc + 0x34, bd->bi_baudrate);
for (i = 0; i < 4; i++)
stb_phys(bdloc + 0x38 + i, bd->bi_s_version[i]);
- for (i = 0; i < 32; i++)
- stb_phys(bdloc + 0x3C + i, bd->bi_s_version[i]);
+ for (i = 0; i < 32; i++) {
+ stb_phys(bdloc + 0x3C + i, bd->bi_r_version[i]);
+ }
stl_phys(bdloc + 0x5C, bd->bi_plb_busfreq);
stl_phys(bdloc + 0x60, bd->bi_pci_busfreq);
for (i = 0; i < 6; i++)