qemu/migration
Dmitry Frolov 0926c002c7 migration: fix-possible-int-overflow
stat64_add() takes uint64_t as 2nd argument, but both
"p->next_packet_size" and "p->packet_len" are uint32_t.
Thus, theyr sum may overflow uint32_t.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Signed-off-by: Dmitry Frolov <frolov@swemel.ru>
Link: https://lore.kernel.org/r/20241113140509.325732-2-frolov@swemel.ru
Signed-off-by: Peter Xu <peterx@redhat.com>
2024-11-13 13:02:46 -05:00
..
block-dirty-bitmap.c
channel-block.c
channel-block.h
channel.c
channel.h
colo-failover.c
colo-stubs.c
colo.c
cpu-throttle.c
dirtyrate.c
dirtyrate.h
exec.c
exec.h
fd.c
fd.h
file.c
file.h
global_state.c
meson.build
migration-hmp-cmds.c
migration-stats.c
migration-stats.h
migration.c
migration.h
multifd-nocomp.c
multifd-qatzip.c
multifd-qpl.c
multifd-uadk.c
multifd-zero-page.c
multifd-zlib.c
multifd-zstd.c
multifd.c migration: fix-possible-int-overflow 2024-11-13 13:02:46 -05:00
multifd.h
options.c
options.h
page_cache.c
page_cache.h
postcopy-ram.c
postcopy-ram.h
qemu-file.c
qemu-file.h
ram.c
ram.h
rdma.c
rdma.h
savevm.c
savevm.h
socket.c
socket.h
target.c
threadinfo.c
threadinfo.h
tls.c
tls.h
trace-events
trace.h
vmstate-types.c
vmstate.c
xbzrle.c
xbzrle.h
yank_functions.c
yank_functions.h