Daniel P. Berrange b72981b910 ipmi: check return of qemu_chr_fe_write() for errors ... The continue_send() method in ipmi_bmc_extern.c directly assigns the return value of qemu_chr_fe_write() to the variable tracking the I/O buffer offset. This ignores the possibility that the return value could be -1 and so will cause I/O go backwards on EAGAIN. Fortunately 'outpos' is unsigned, so can't go negative - it will become MAX_INT which will cause the loop to stop, and avoid an accidental out of bounds array access. Signed-off-by: Daniel P. Berrange <berrange@redhat.com> Message-Id: <1473170165-540-2-git-send-email-berrange@redhat.com> Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>		2016-09-13 19:09:42 +02:00
..
ipmi_bmc_extern.c	ipmi: check return of qemu_chr_fe_write() for errors	2016-09-13 19:09:42 +02:00
ipmi_bmc_sim.c	ipmi: add some local variables in ipmi_sdr_init	2016-03-11 16:59:13 +02:00
ipmi.c	ipmi: rework the fwinfo to be fetched from the interface	2016-06-07 15:36:54 +03:00
isa_ipmi_bt.c	ipmi: rework the fwinfo to be fetched from the interface	2016-06-07 15:36:54 +03:00
isa_ipmi_kcs.c	ipmi: rework the fwinfo to be fetched from the interface	2016-06-07 15:36:54 +03:00
Makefile.objs	ipmi: Add a BT low-level interface	2015-12-22 18:39:19 +02:00