diff options
| author | Alexey Kardashevskiy <aik@ozlabs.ru> | 2014-04-07 22:53:21 +1000 |
|---|---|---|
| committer | Alexander Graf <agraf@suse.de> | 2014-06-16 13:24:27 +0200 |
| commit | b26696b519f853c9844e5154858e583600ee3cdc (patch) | |
| tree | e8dc4d0e09d486653ea79c9d05dff60ddf39a5dd /memory_mapping.c | |
| parent | fabe9ee1133b606390f6ca463ddb490051cba760 (diff) | |
| download | qemu-b26696b519f853c9844e5154858e583600ee3cdc.zip qemu-b26696b519f853c9844e5154858e583600ee3cdc.tar.gz qemu-b26696b519f853c9844e5154858e583600ee3cdc.tar.bz2 | |
spapr_pci: Fix number of returned vectors in ibm, change-msi
Current guest kernels try allocating as many vectors as the quota is.
For example, in the case of virtio-net (which has just 3 vectors)
the guest requests 4 vectors (that is the quota in the test) and
the existing ibm,change-msi handler returns 4. But before it returns,
it calls msix_set_message() in a loop and corrupts memory behind
the end of msix_table.
This limits the number of vectors returned by ibm,change-msi to
the maximum supported by the actual device.
Signed-off-by: Alexey Kardashevskiy <aik@ozlabs.ru>
Cc: qemu-stable@nongnu.org
[agraf: squash in bugfix from aik]
Signed-off-by: Alexander Graf <agraf@suse.de>
Diffstat (limited to 'memory_mapping.c')
0 files changed, 0 insertions, 0 deletions