Gonglei 7b50d00911 pcnet: fix Negative array index read ...

s->xmit_pos maybe assigned to a negative value (-1),
but in this branch variable s->xmit_pos as an index to
array s->buffer. Let's add a check for s->xmit_pos.

Signed-off-by: Gonglei <arei.gonglei@huawei.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Reviewed-by: Jason Wang <jasowang@redhat.com>
Reviewed-by: Jason Wang <jasowang@redhat.com>
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>

2014-11-21 10:50:54 +00:00

..

fsl_etsec

Fix typo in eTSEC Ethernet controller

2014-06-16 13:24:26 +02:00

allwinner_emac.c

allwinner-emac: update irq status after writes to interrupt registers

2014-04-17 21:34:06 +01:00

cadence_gem.c

net: cadence_gem: Remove &desc[0] usages

2014-06-10 19:39:34 +04:00

dp8393x.c

nic: do not destroy memory regions in cleanup functions

2014-08-17 23:25:24 +02:00

e1000_regs.h

e1000: improve auto-negotiation reporting via mii-tool

2014-06-23 17:38:00 +03:00

e1000.c

bootindex: move calling add_boot_device_patch to bootindex setter function

2014-10-15 10:46:01 +02:00

eepro100.c

bootindex: move calling add_boot_device_patch to bootindex setter function

2014-10-15 10:46:01 +02:00

etraxfs_eth.c

hw: cannot_instantiate_with_device_add_yet due to pointer props

2013-12-24 17:27:17 +01:00

lan9118.c

Fix lan9118 buffer length handling

2014-01-27 15:44:06 +01:00

lance.c

pcnet: add bootindex to qom property

2014-10-15 09:52:54 +02:00

Makefile.objs

Add Enhanced Three-Speed Ethernet Controller (eTSEC)

2014-03-05 03:06:45 +01:00

mcf_fec.c

nic: do not destroy memory regions in cleanup functions

2014-08-17 23:25:24 +02:00

milkymist-minimac2.c

memory: add parameter errp to memory_region_init_ram

2014-09-09 13:41:43 +02:00

mipsnet.c

savevm: Remove all the unneeded version_minimum_id_old (rest)

2014-05-14 15:24:51 +02:00

ne2000-isa.c

ne2000: add bootindex to qom property

2014-10-15 09:52:54 +02:00

ne2000.c

bootindex: move calling add_boot_device_patch to bootindex setter function

2014-10-15 10:46:01 +02:00

ne2000.h

ne2000: pass device to ne2000_setup_io, use it as owner

2013-07-04 17:42:46 +02:00

opencores_eth.c

opencores_eth: flush queue whenever can_receive can go from false to true

2014-02-25 11:50:16 +01:00

pcnet-pci.c

pcnet: add bootindex to qom property

2014-10-15 09:52:54 +02:00

pcnet.c

pcnet: fix Negative array index read

2014-11-21 10:50:54 +00:00

pcnet.h

pcnet: add bootindex to qom property

2014-10-15 09:52:54 +02:00

rtl8139.c

bootindex: move calling add_boot_device_patch to bootindex setter function

2014-10-15 10:46:01 +02:00

smc91c111.c

savevm: Remove all the unneeded version_minimum_id_old (arm)

2014-05-13 16:09:35 +01:00

spapr_llan.c

bootindex: move calling add_boot_device_patch to bootindex setter function

2014-10-15 10:46:01 +02:00

stellaris_enet.c

memory: remove memory_region_destroy

2014-08-18 12:06:21 +02:00

vhost_net.c

virtio: Import virtio_vring.h

2014-09-22 11:39:49 +01:00

virtio-net.c

bootindex: move calling add_boot_device_patch to bootindex setter function

2014-10-15 10:46:01 +02:00

vmware_utils.h

exec: Make stb_phys input an AddressSpace

2014-02-11 22:57:38 +10:00

vmxnet3.c

bootindex: move calling add_boot_device_patch to bootindex setter function

2014-10-15 10:46:01 +02:00

vmxnet3.h

vmxnet3: Eliminate __packed redefined warning

2013-09-06 17:25:55 +02:00

vmxnet_debug.h

hw: move target-independent files to subdirectories

2013-04-08 18:13:12 +02:00

vmxnet_rx_pkt.c

hw: move target-independent files to subdirectories

2013-04-08 18:13:12 +02:00

vmxnet_rx_pkt.h

hw: move target-independent files to subdirectories

2013-04-08 18:13:12 +02:00

vmxnet_tx_pkt.c

misc: Use g_assert_not_reached for code which is expected to be unreachable

2013-07-27 11:22:54 +04:00

vmxnet_tx_pkt.h

hw: move target-independent files to subdirectories

2013-04-08 18:13:12 +02:00

xen_nic.c

hw: move target-independent files to subdirectories

2013-04-08 18:13:12 +02:00

xgmac.c

savevm: Remove all the unneeded version_minimum_id_old (arm)

2014-05-13 16:09:35 +01:00

xilinx_axienet.c

hw: Consistently name Error * objects err, and not errp

2014-05-05 19:08:49 +02:00

xilinx_ethlite.c

net: xilinx_ethlite: Fix Rx-pong interrupt

2014-06-09 15:38:58 +02:00