qemu-irix/hw
Gonglei 7b50d00911 pcnet: fix Negative array index read
s->xmit_pos maybe assigned to a negative value (-1),
but in this branch variable s->xmit_pos as an index to
array s->buffer. Let's add a check for s->xmit_pos.

Signed-off-by: Gonglei <arei.gonglei@huawei.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Reviewed-by: Jason Wang <jasowang@redhat.com>
Reviewed-by: Jason Wang <jasowang@redhat.com>
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
2014-11-21 10:50:54 +00:00
..
9pfs virtio-9p-proxy: improve error messages in connect_namedsocket() 2014-11-02 10:04:34 +03:00
acpi pc: piix4_pm: init legacy PCI hotplug when running on Xen 2014-11-14 11:11:44 +00:00
alpha
arm hw/arm/virt: set stdout-path instead of linux,stdout-path 2014-11-20 14:58:37 +00:00
audio ac97: register reset via qom 2014-09-29 10:20:05 +02:00
block A smattering of fixes for problems that Coverity reported. 2014-11-17 17:22:03 +00:00
bt
char Several bugfixes for s390x: 2014-11-10 14:58:59 +00:00
core loader: fix NEGATIVE_RETURNS 2014-11-17 11:41:56 +01:00
cpu icc_bus: fix typo ICC_BRIGDE -> ICC_BRIDGE 2014-11-03 19:51:56 +03:00
cris
display vmware-vga: use vmsvga_verify_rect in vmsvga_fill_rect 2014-10-29 12:01:30 +01:00
dma
gpio PPC: Add MPC8XXX gpio controller 2014-11-04 23:26:12 +01:00
i2c
i386 pc: piix4_pm: init legacy PCI hotplug when running on Xen 2014-11-14 11:11:44 +00:00
ide hw/ide/core.c: Prevent SIGSEGV during migration 2014-11-18 17:36:14 +00:00
input
intc apic_common: migrate missing fields 2014-11-13 16:13:27 +01:00
ipack
isa
lm32
m68k
mem
microblaze
mips mips_mipssim: fix use-after-free for filename 2014-11-17 11:41:03 +01:00
misc
moxie
net pcnet: fix Negative array index read 2014-11-21 10:50:54 +00:00
nvram spapr_nvram: Enable migration 2014-11-04 23:26:13 +01:00
openrisc
pci shpc: fix error propaagation 2014-11-17 11:49:19 +01:00
pci-bridge
pci-host
pcmcia
ppc spapr: Allow dynamic creation of PHB 2014-11-04 23:26:15 +01:00
s390x
scsi virtio-scsi: dataplane: suppress guest notification 2014-11-12 11:19:19 +01:00
sd
sh4
sparc
sparc64
ssi
timer
tpm
tricore
unicore32
usb hcd-musb: fix dereference null return value 2014-11-17 18:02:31 +01:00
virtio vhost-user: fix mmap offset calculation 2014-11-03 18:32:48 +02:00
watchdog
xen
xenpv
xtensa
Makefile.objs