On 04/05/2016 10:54, Dr. David Alan Gilbert wrote: > And so my argument here is very simple; if we believe we have a corruption > in migration data then we fail migration - I don't try and do anything > clever about trying to bound what's broken. > This isn't about getting formal/tractable arguments, it's about making > a practical system.
But this code is not driven by the migration data. It is driven by the vmstate description which is static. It's not const, but still it's not supposed to get corrupted at all. Thanks, Paolo
