qemu/hw/ipmi
Daniel P. Berrange b72981b910 ipmi: check return of qemu_chr_fe_write() for errors
The continue_send() method in ipmi_bmc_extern.c directly
assigns the return value of qemu_chr_fe_write() to the
variable tracking the I/O buffer offset. This ignores the
possibility that the return value could be -1 and so will
cause I/O go backwards on EAGAIN. Fortunately 'outpos' is
unsigned, so can't go negative - it will become MAX_INT
which will cause the loop to stop, and avoid an accidental
out of bounds array access.

Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
Message-Id: <1473170165-540-2-git-send-email-berrange@redhat.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
2016-09-13 19:09:42 +02:00
..
ipmi_bmc_extern.c ipmi: check return of qemu_chr_fe_write() for errors 2016-09-13 19:09:42 +02:00
ipmi_bmc_sim.c
ipmi.c ipmi: rework the fwinfo to be fetched from the interface 2016-06-07 15:36:54 +03:00
isa_ipmi_bt.c ipmi: rework the fwinfo to be fetched from the interface 2016-06-07 15:36:54 +03:00
isa_ipmi_kcs.c ipmi: rework the fwinfo to be fetched from the interface 2016-06-07 15:36:54 +03:00
Makefile.objs