forked from mirror/qemu
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
3fde641e72
In one case: memcpy(sid->inmsg + sid->inlen, buf, len); if len == 0 then sid->inmsg + sig->inlen can point to one past the inmsg array if the array is full. We have to allow len == 0 due to some vagueness in the spec, but we don't have to call memcpy. Found by Coverity. This is not a problem in practice, but the results are technically (maybe) undefined. So make Coverity happy. Reported-by: Peter Maydell <peter.maydell@linaro.org> Signed-off-by: Corey Minyard <cminyard@mvista.com> Acked-by: Michael S. Tsirkin <mst@redhat.com> Reviewed-by: Peter Maydell <peter.maydell@linaro.org> |
2 years ago | |
---|---|---|
.. | ||
Kconfig | 5 years ago | |
ipmi.c | 3 years ago | |
ipmi_bmc_extern.c | 4 years ago | |
ipmi_bmc_sim.c | 3 years ago | |
ipmi_bt.c | 5 years ago | |
ipmi_kcs.c | 5 years ago | |
isa_ipmi_bt.c | 2 years ago | |
isa_ipmi_kcs.c | 2 years ago | |
meson.build | 4 years ago | |
pci_ipmi_bt.c | 4 years ago | |
pci_ipmi_kcs.c | 4 years ago | |
smbus_ipmi.c | 2 years ago |