On Wed, 2015-01-28 at 15:24 +0000, Jan Beulich wrote: > "origPtr" is used as an offset into the bd->dbuf[] array. That array is > allocated in start_bunzip() and has "bd->dbufSize" number of elements so > the test here should be >= instead of >. > > Later we check "origPtr" again before using it as an offset so I don't > know if this bug can be triggered in real life. > > Signed-off-by: Dan Carpenter <dan.carpen...@oracle.com> > > Trivial adjustments to make the respective Linux commit > b5c8afe5be51078a979d86ae5ae78c4ac948063d apply to Xen. > > Signed-off-by: Jan Beulich <jbeul...@suse.com>
Acked-by: Ian Campbell <ian.campb...@citrix.com> _______________________________________________ Xen-devel mailing list Xen-devel@lists.xen.org http://lists.xen.org/xen-devel
