Stefano Stabellini f9e98e5d7a xen/blkif: Avoid double access to src->nr_segments ...

src is stored in shared memory and src->nr_segments is dereferenced
twice at the end of the function.  If a compiler decides to compile this
into two separate memory accesses then the size limitation could be
bypassed.

Fix it by removing the double access to src->nr_segments.

This is part of XSA-155.

Signed-off-by: Stefano Stabellini <stefano.stabellini@eu.citrix.com>

2015-12-18 15:09:58 +00:00

..

dataplane

virtio-blk: Drop x-data-plane option

2015-12-07 16:47:16 +00:00

block.c

…

cdrom.c

…

ecc.c

…

fdc.c

hw/block/fdc: Implement tray status

2015-10-23 18:18:23 +02:00

hd-geometry.c

…

m25p80.c

m25p80: fix s->blk usage before assignment

2015-04-28 15:36:09 +02:00

Makefile.objs

…

nand.c

nand: fix flash erase when oob is in memory

2015-11-25 14:27:43 +01:00

nvme.c

nvme: Account for failed and invalid operations

2015-11-12 16:22:46 +01:00

nvme.h

nvme: implement the Flush command

2015-07-14 15:55:19 +02:00

onenand.c

Fix bad error handling after memory_region_init_ram()

2015-09-18 14:39:29 +02:00

pflash_cfi01.c

pflash_cfi01: add secure property

2015-06-05 17:36:39 +02:00

pflash_cfi02.c

…

tc58128.c

…

virtio-blk.c

virtio-blk: Drop x-data-plane option

2015-12-07 16:47:16 +00:00

xen_blkif.h

xen/blkif: Avoid double access to src->nr_segments

2015-12-18 15:09:58 +00:00

xen_disk.c

xen_disk: Remove ioreq.postsync

2015-11-25 11:04:55 +00:00