Re: [Qemu-devel] [PATCH] segfault due to buffer overrun in usb-serial

2010-02-10 Thread Anthony Liguori
On 02/03/2010 10:00 AM, David S. Ahern wrote: This fixes a segfault due to buffer overrun in the usb-serial device. The memcpy was incrementing the start location by recv_used yet, the computation of first_size (how much to write at the end of the buffer before wrapping to the front) was not acco

[Qemu-devel] [PATCH] segfault due to buffer overrun in usb-serial

2010-02-03 Thread David S. Ahern
This fixes a segfault due to buffer overrun in the usb-serial device. The memcpy was incrementing the start location by recv_used yet, the computation of first_size (how much to write at the end of the buffer before wrapping to the front) was not accounting for it. This causes the next element afte