From: Markus Armbruster <arm...@redhat.com> Spotted by Coverity.
Signed-off-by: Markus Armbruster <arm...@redhat.com> Signed-off-by: Gerd Hoffmann <kra...@redhat.com> --- hw/qxl.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/hw/qxl.c b/hw/qxl.c index ac81927..bdd36f9 100644 --- a/hw/qxl.c +++ b/hw/qxl.c @@ -1020,7 +1020,7 @@ void *qxl_phys2virt(PCIQXLDevice *qxl, QXLPHYSICAL pqxl, int group_id) case MEMSLOT_GROUP_HOST: return (void*)offset; case MEMSLOT_GROUP_GUEST: - PANIC_ON(slot > NUM_MEMSLOTS); + PANIC_ON(slot >= NUM_MEMSLOTS); PANIC_ON(!qxl->guest_slots[slot].active); PANIC_ON(offset < qxl->guest_slots[slot].delta); offset -= qxl->guest_slots[slot].delta; -- 1.7.1