Mark Cave-Ayland 54a53a006e scsi-disk: fix overflow when block size is not a multiple of BDRV_SECTOR_SIZE ... In scsi_disk_emulate_write_same() the number of host sectors to transfer is calculated as (s->qdev.blocksize / BDRV_SECTOR_SIZE) which is then used to copy data in block size chunks to the iov buffer. Since the loop copying the data to the iov buffer uses a fixed increment of s->qdev.blocksize then using a block size that isn't a multiple of BDRV_SECTOR_SIZE introduces a rounding error in the iov buffer size calculation such that the iov buffer copy overflows the space allocated. Update the iov buffer copy for() loop so that it will use the smallest of either the current block size or the remaining transfer count to prevent the overflow. Signed-off-by: Mark Cave-Ayland <mark.cave-ayland@ilande.co.uk> Message-Id: <20220730122656.253448-2-mark.cave-ayland@ilande.co.uk> Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>		2022-08-01 15:22:39 +02:00
..
9pfs	trivial typos: namesapce	2022-06-28 11:06:44 +02:00
acpi	acpi/nvdimm: Define trace events for NVDIMM and substitute nvdimm_debug()	2022-07-26 10:37:46 -04:00
adc	hw/adc: Make adci[*] R/W in NPCM7XX ADC	2022-07-18 13:20:14 +01:00
alpha	Remove qemu-common.h include from most units	2022-04-06 14:31:55 +02:00
arm	Align Raspberry Pi DMA interrupts with Linux DTS	2022-07-18 13:25:13 +01:00
audio	hw/audio/cs4231a: Const'ify global tables	2022-06-11 11:44:50 +02:00
avr	Remove qemu-common.h include from most units	2022-04-06 14:31:55 +02:00
block	hw: m25p80: Add Block Protect and Top Bottom bits for write protect	2022-07-14 16:24:38 +02:00
char	acpi: serial-is: replace ISADeviceClass::build_aml with AcpiDevAmlIfClass:build_dev_aml	2022-06-09 19:32:48 -04:00
core	qdev: unplug blocker for devices	2022-06-15 14:50:41 +01:00
cpu	cpu/core: Fix "help" of CPU core device types	2021-04-09 16:05:16 -04:00
cris	Do not include exec/address-spaces.h if it's not really necessary	2021-05-02 17:24:51 +02:00
cxl	pci-bridge/cxl_downstream: Add a CXL switch downstream port	2022-06-16 12:54:57 -04:00
display	vga: fix incorrect line height in 640x200x2 mode	2022-07-28 15:36:17 +02:00
dma	ptimer: Rename PTIMER_POLICY_DEFAULT to PTIMER_POLICY_LEGACY	2022-05-19 16:19:03 +01:00
gpio	hw/gpio/aspeed: Don't let guests modify input pins	2022-07-14 16:24:38 +02:00
hppa	lasips2: remove legacy lasips2_initfn() function	2022-07-18 19:28:46 +01:00
hyperv	hw/hyperv/vmbus: Remove unused vmbus_load/save_req()	2022-05-30 19:49:42 +02:00
i2c	hw/i2c/pmbus: Add idle state to return 0xff's	2022-07-14 16:24:38 +02:00
i386	i386/pc: restrict AMD only enforcing of 1Tb hole to new machine type	2022-07-26 10:40:58 -04:00
ide	block: Change blk_{pread,pwrite}() param order	2022-07-12 12:14:56 +02:00
input	pckbd: remove legacy i8042_mm_init() function	2022-07-18 19:28:46 +01:00
intc	hw/intc: sifive_plic: Fix multi-socket plic configuraiton	2022-07-28 09:08:44 +10:00
ipack	qbus: Rename qbus_create_inplace() to qbus_init()	2021-09-30 13:42:10 +01:00
ipmi	acpi: ipmi: use AcpiDevAmlIf interface to build IPMI device descriptors	2022-06-09 19:32:49 -04:00
isa	hw/i386/xen/xen-hvm: Inline xen_piix_pci_write_config_client() and remove it	2022-06-29 00:24:59 +02:00
loongarch	hw/loongarch: Change macro name 'LS7A_XXX' to 'VIRT_XXX'	2022-07-29 15:07:55 -07:00
m68k	q800: add default vendor and product information for scsi-cd devices	2022-07-13 16:58:58 +02:00
mem	mem/cxl_type3: Add read and write functions for associated hostmem.	2022-05-13 07:57:26 -04:00
microblaze	Remove qemu-common.h include from most units	2022-04-06 14:31:55 +02:00
mips	hw/mips: boston: pass random seed to fdt	2022-07-22 19:01:44 +02:00
misc	aspeed: sbc: Allow per-machine settings	2022-07-14 16:24:38 +02:00
net	e1000e: Fix possible interrupt loss when using MSI	2022-07-26 16:23:54 +08:00
nios2	hw/nios2: virt: pass random seed to fdt	2022-07-22 19:01:44 +02:00
nubus	qbus: Rename qbus_create_inplace() to qbus_init()	2021-09-30 13:42:10 +01:00
nvme	hw/nvme: Use ioeventfd to handle doorbell updates	2022-07-15 10:40:33 +02:00
nvram	block: Change blk_{pread,pwrite}() param order	2022-07-12 12:14:56 +02:00
openrisc	hw/openrisc: use right OMPIC size variable	2022-05-15 10:33:01 +09:00
pci	trivial patches pull request 20220629	2022-06-30 04:49:40 +05:30
pci-bridge	pci-bridge/cxl_downstream: Add a CXL switch downstream port	2022-06-16 12:54:57 -04:00
pci-host	i386/pc: create pci-host qdev prior to pc_memory_init()	2022-07-26 10:40:58 -04:00
pcmcia	hw/pcmcia: Do not register PCMCIA type if not required	2021-05-02 17:24:50 +02:00
ppc	hw/ppc/ppc440_uc: Initialize length passed to cpu_physical_memory_map()	2022-07-28 10:31:54 -03:00
rdma	hw/pvrdma: Some cosmetic fixes	2022-04-26 12:25:14 +02:00
remote	vfio-user: handle reset of remote device	2022-06-15 16:43:42 +01:00
riscv	hw/riscv: boot: Reduce FDT address alignment constraints	2022-07-03 10:03:20 +10:00
rtc	hw/rtc/ls7a_rtc: Drop unused inline functions	2022-07-05 16:17:53 +05:30
rx	hw/rx: pass random seed to fdt	2022-07-22 19:01:44 +02:00
s390x	virtio: stop ioeventfd on reset	2022-06-14 16:50:30 +02:00
scsi	scsi-disk: fix overflow when block size is not a multiple of BDRV_SECTOR_SIZE	2022-08-01 15:22:39 +02:00
sd	block: Change blk_{pread,pwrite}() param order	2022-07-12 12:14:56 +02:00
sensor	hw/sensor: Add Renesas ISL69259 device model	2022-07-14 16:24:38 +02:00
sh4	Use g_new() & friends where that makes obvious sense	2022-03-21 15:44:44 +01:00
smbios	hw/smbios: Add table 4 parameter, "processor-id"	2022-03-06 05:28:55 -05:00
sparc	machine: make memory-backend a link property	2022-05-12 12:29:44 +02:00
sparc64	hw: Reuse TYPE_I8042 define	2022-06-11 11:44:50 +02:00
ssi	aspeed/smc: Fix potential overflow	2022-06-30 09:21:13 +02:00
timer	Fix 'writeable' typos	2022-06-08 19:38:47 +01:00
tpm	acpi: tpm-tis: use AcpiDevAmlIfClass:build_dev_aml to provide device's AML	2022-06-09 19:32:49 -04:00
tricore	hw/tricore: fix inclusion of tricore_testboard	2021-07-20 20:10:21 +02:00
usb	usb/hcd-xhci: check slotid in xhci_wakeup_endpoint()	2022-07-19 14:36:38 +02:00
vfio	ui/console: Do not return a value with ui_info	2022-06-14 10:34:37 +02:00
virtio	hw/virtio/virtio-iommu: Enforce power-of-two notify for both MAP and UNMAP	2022-07-26 15:33:29 -04:00
watchdog	ppc/spapr: Implement H_WATCHDOG	2022-07-06 10:22:38 -03:00
xen	xen/pass-through: don't create needless register group	2022-07-05 14:19:48 +01:00
xenpv	Warn user if the vga flag is passed but no vga device is created	2022-05-09 08:21:14 +02:00
xtensa	hw/xtensa: fix reset value of MIROUT register of MX PIC	2022-05-06 15:27:40 -07:00
Kconfig	hw/loongarch: Add support loongson3 virt machine type.	2022-06-06 18:09:03 +00:00
meson.build	hw/loongarch: Add support loongson3 virt machine type.	2022-06-06 18:09:03 +00:00