commit | 719ffe1f5f72b1c7ace4afe9ba2815bcb53a829e | [log] [tgz] |
---|---|---|
author | Michael S. Tsirkin <mst@redhat.com> | Tue May 13 12:33:16 2014 +0300 |
committer | Juan Quintela <quintela@trasno.org> | Wed May 14 15:24:52 2014 +0200 |
tree | f3a928ff50a684a2d630338c454b4627d5e13b36 | |
parent | d6ed7312d11995409bd53ef8f1a743d8877880d2 [diff] |
usb: fix up post load checks Correct post load checks: 1. dev->setup_len == sizeof(dev->data_buf) seems fine, no need to fail migration 2. When state is DATA, passing index > len will cause memcpy with negative length, resulting in heap overflow First of the issues was reported by dgilbert. Reported-by: "Dr. David Alan Gilbert" <dgilbert@redhat.com> Signed-off-by: Michael S. Tsirkin <mst@redhat.com> Signed-off-by: Juan Quintela <quintela@redhat.com>