diff options
| author | Dmitry Frolov <frolov@swemel.ru> | 2024-10-14 13:18:56 +0100 |
|---|---|---|
| committer | Michael S. Tsirkin <mst@redhat.com> | 2024-11-04 16:03:24 -0500 |
| commit | df66b85f357f9669457906ece865d6183cf12580 (patch) | |
| tree | 599fb9e697f5bf8a3ea5e0e2d534dc4da7a427ba /qemu-keymap.c | |
| parent | 963b02764537c66af88b82bd297c375b147e0756 (diff) | |
| download | qemu-df66b85f357f9669457906ece865d6183cf12580.zip qemu-df66b85f357f9669457906ece865d6183cf12580.tar.gz qemu-df66b85f357f9669457906ece865d6183cf12580.tar.bz2 | |
hw/cxl: Fix uint32 overflow cxl-mailbox-utils.c
The sum offset + length may overflow uint32. Since this sum is
compared with uint64_t return value of get_lsa_size(), it makes
sense to choose uint64_t type for offset and length.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Fixes: 3ebe676a3463 ("hw/cxl/device: Implement get/set Label Storage Area (LSA)")
Signed-off-by: Dmitry Frolov <frolov@swemel.ru>
Link: https://lore.kernel.org/r/20240917080925.270597-2-frolov@swemel.ru
Signed-off-by: Jonathan Cameron <Jonathan.Cameron@huawei.com>
Message-Id: <20241014121902.2146424-2-Jonathan.Cameron@huawei.com>
Reviewed-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Diffstat (limited to 'qemu-keymap.c')
0 files changed, 0 insertions, 0 deletions