Commit 258133bd authored by Gonglei's avatar Gonglei Committed by Michael Tokarev
Browse files

ivshmem-server: fix possible OVERRUN 



>>>     CID 1337991:  Memory - illegal accesses  (OVERRUN)
>>>     Decrementing "i". The value of "i" is now 65534.
218         while (i--) {
219             event_notifier_cleanup(&peer->vectors[i]);
220         }

Signed-off-by: default avatarGonglei <arei.gonglei@huawei.com>
Reviewed-by: default avatarMarc-André Lureau <marcandre.lureau@redhat.com>
Signed-off-by: default avatarMichael Tokarev <mjt@tls.msk.ru>
parent 6268520d

contrib/ivshmem-server/ivshmem-server.c

+3 −1
Original line number Diff line number Diff line
@@ -168,7 +168,9 @@ ivshmem_server_handle_new_conn(IvshmemServer *server) 
    }

    if (i == G_MAXUINT16) {

        IVSHMEM_SERVER_DEBUG(server, "cannot allocate new client id\n");

        goto fail;

        close(newfd);

        g_free(peer);

        return -1;

    }

    peer->id = server->cur_id++;