On 06/01/2020 15:19, David Gibson wrote: >> + >> +static uint32_t client_package_to_path(const void *fdt, uint32_t phandle, >> + uint32_t buf, uint32_t len) >> +{ >> + char tmp[256]; > > Fixed sized buffers are icky. You could either dynamically allocate > this based on the size the client gives, or you could use > memory_region_get_ram_ptr() to read the data from the tree directly > into guest memory. @len comes from the guest, I am really not comfortable with allocating whatever (broken) guest requested. And if I limit @len by 1024 or similar, then a fixed size buffer will do too, no? btw how exactly can I use memory_region_get_ram_ptr()? get_system_memory() returns a root MR which is not RAM, RAM is a "spapr.ram" sub-MR. -- Alexey
- Re: [PATCH qemu v2] spapr: Kill SLOF Alexey Kardashevskiy
- Re: [PATCH qemu v2] spapr: Kill SLOF Cédric Le Goater
- Re: [PATCH qemu v2] spapr: Kill S... Peter Maydell
- Re: [PATCH qemu v2] spapr: K... Philippe Mathieu-Daudé
- Re: [PATCH qemu v2] spapr: K... Alexey Kardashevskiy
- Re: [PATCH qemu v2] spapr: Kill SLOF David Gibson
- Re: [PATCH qemu v2] spapr: Kill S... Alexey Kardashevskiy
- Re: [PATCH qemu v2] spapr: K... David Gibson
- Re: [PATCH qemu v2] spapr: Kill SLOF Alexey Kardashevskiy
- Re: [PATCH qemu v2] spapr: Kill SLOF David Gibson
- Re: [PATCH qemu v2] spapr: Kill SLOF Alexey Kardashevskiy
- Re: [PATCH qemu v2] spapr: Kill SLOF David Gibson
- Re: [PATCH qemu v2] spapr: Kill SLOF Alexey Kardashevskiy
- Re: [PATCH qemu v2] spapr: Kill SLOF Alexey Kardashevskiy
- Re: [PATCH qemu v2] spapr: Kill S... David Gibson
- Re: [PATCH qemu v2] spapr: Kill SLOF David Gibson