If buf_size % granularity is not 0, mirror_free_init() will
do dangerous things.

Signed-off-by: Wen Congyang <we...@cn.fujitsu.com>
---
 block/mirror.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/block/mirror.c b/block/mirror.c
index 58f391a..bb6bc27 100644
--- a/block/mirror.c
+++ b/block/mirror.c
@@ -686,6 +686,10 @@ static void mirror_start_job(BlockDriverState *bs, 
BlockDriverState *target,
     s->granularity = granularity;
     s->buf_size = MAX(buf_size, granularity);
 
+    if (s->buf_size % granularity != 0) {
+        s->buf_size = ROUND_UP(s->buf_size, granularity);
+    }
+
     s->dirty_bitmap = bdrv_create_dirty_bitmap(bs, granularity, NULL, errp);
     if (!s->dirty_bitmap) {
         return;
-- 
2.1.0

Reply via email to