Similar to the cmd_write_pio fix, update the nsector count and ide sector before we invoke ide_transfer_start.
Signed-off-by: John Snow <js...@redhat.com> Reviewed-by: Stefan Hajnoczi <stefa...@redhat.com> Tested-by: Andreas Färber <afaer...@suse.de> Message-id: 1426811056-2202-3-git-send-email-js...@redhat.com --- hw/ide/core.c | 8 +++----- 1 file changed, 3 insertions(+), 5 deletions(-) diff --git a/hw/ide/core.c b/hw/ide/core.c index 0e9da64..a895fd8 100644 --- a/hw/ide/core.c +++ b/hw/ide/core.c @@ -587,14 +587,12 @@ static void ide_sector_read_cb(void *opaque, int ret) n = s->req_nb_sectors; } + ide_set_sector(s, ide_get_sector(s) + n); + s->nsector -= n; /* Allow the guest to read the io_buffer */ ide_transfer_start(s, s->io_buffer, n * BDRV_SECTOR_SIZE, ide_sector_read); - - ide_set_irq(s->bus); - - ide_set_sector(s, ide_get_sector(s) + n); - s->nsector -= n; s->io_buffer_offset += 512 * n; + ide_set_irq(s->bus); } static void ide_sector_read(IDEState *s) -- 2.1.0