tree f3a928ff50a684a2d630338c454b4627d5e13b36
parent d6ed7312d11995409bd53ef8f1a743d8877880d2
author Michael S. Tsirkin <mst@redhat.com> 1399973596 +0300
committer Juan Quintela <quintela@trasno.org> 1400073892 +0200

usb: fix up post load checks

Correct post load checks:
1. dev->setup_len == sizeof(dev->data_buf)
    seems fine, no need to fail migration
2. When state is DATA, passing index > len
   will cause memcpy with negative length,
   resulting in heap overflow

First of the issues was reported by dgilbert.

Reported-by: "Dr. David Alan Gilbert" <dgilbert@redhat.com>
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Juan Quintela <quintela@redhat.com>