qemu/hw/ipmi
Corey Minyard 3fde641e72 ipmi:smbus: Add a check around a memcpy
In one case:

  memcpy(sid->inmsg + sid->inlen, buf, len);

if len == 0 then sid->inmsg + sig->inlen can point to one past the inmsg
array if the array is full.  We have to allow len == 0 due to some
vagueness in the spec, but we don't have to call memcpy.

Found by Coverity.  This is not a problem in practice, but the results
are technically (maybe) undefined.  So make Coverity happy.

Reported-by: Peter Maydell <peter.maydell@linaro.org>
Signed-off-by: Corey Minyard <cminyard@mvista.com>
Acked-by: Michael S. Tsirkin <mst@redhat.com>
Reviewed-by: Peter Maydell <peter.maydell@linaro.org>
2022-08-01 06:40:50 -05:00
..
ipmi.c Mark remaining global TypeInfo instances as const 2022-02-21 13:30:20 +00:00
ipmi_bmc_extern.c Remove superfluous timer_del() calls 2021-01-08 15:13:38 +00:00
ipmi_bmc_sim.c ipmi/sim: fix watchdog_expired data type error in IPMIBmcSim struct 2021-07-08 14:15:01 -05:00
ipmi_bt.c ipmi: Allow a size value to be passed for I/O space 2019-09-20 14:08:10 -05:00
ipmi_kcs.c ipmi: Allow a size value to be passed for I/O space 2019-09-20 14:08:10 -05:00
isa_ipmi_bt.c acpi: ipmi: use AcpiDevAmlIf interface to build IPMI device descriptors 2022-06-09 19:32:49 -04:00
isa_ipmi_kcs.c acpi: ipmi: use AcpiDevAmlIf interface to build IPMI device descriptors 2022-06-09 19:32:49 -04:00
Kconfig ipmi: Add an SMBus IPMI interface 2019-09-20 14:08:10 -05:00
meson.build meson: convert hw/ipmi 2020-08-21 06:30:29 -04:00
pci_ipmi_bt.c Use OBJECT_DECLARE_SIMPLE_TYPE when possible 2020-09-18 14:12:32 -04:00
pci_ipmi_kcs.c Use OBJECT_DECLARE_SIMPLE_TYPE when possible 2020-09-18 14:12:32 -04:00
smbus_ipmi.c ipmi:smbus: Add a check around a memcpy 2022-08-01 06:40:50 -05:00