[Xen-changelog] [xen-unstable] [QEMU] usb-uhci: Data buffer is too small

[Xen patchbot-unstable <patchbot-unstable@xxxxxxxxxxxxxxxxxxx>]

# HG changeset patch
# User kfraser@xxxxxxxxxxxxxxxxxxxxx
# Node ID f19ddc0ee3e68d5d8a250ba0a20ab7d90ae9a36a
# Parent  f66f7c3a82a7420d80714b0d349ee9a24b50ec28
[QEMU] usb-uhci: Data buffer is too small

The data buffer is only 1280 bytes long but the user-supplied length
can be as large as 0x7ff.  This patch extends the buffer to 2048
bytes.

Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
---
 tools/ioemu/hw/usb-uhci.c |    2 +-
 1 files changed, 1 insertion(+), 1 deletion(-)

diff -r f66f7c3a82a7 -r f19ddc0ee3e6 tools/ioemu/hw/usb-uhci.c
--- a/tools/ioemu/hw/usb-uhci.c Thu Nov 30 17:32:16 2006 +0000
+++ b/tools/ioemu/hw/usb-uhci.c Thu Nov 30 17:33:11 2006 +0000
@@ -421,7 +421,7 @@ static int uhci_handle_td(UHCIState *s, 
 static int uhci_handle_td(UHCIState *s, UHCI_TD *td, int *int_mask)
 {
     uint8_t pid;
-    uint8_t buf[1280];
+    uint8_t buf[2048];
     int len, max_len, err, ret;
 
     if (td->ctrl & TD_CTRL_IOC) {

_______________________________________________
Xen-changelog mailing list
Xen-changelog@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-changelog