On Do, 2014-04-03 at 19:52 +0300, Michael S. Tsirkin wrote:
> - if (dev->setup_index >= sizeof(dev->data_buf) ||
> + if (dev->setup_index < 0 ||
> + dev->setup_len < 0 ||
> + dev->setup_index >= sizeof(dev->data_buf) ||
> dev->setup_len >= sizeof(dev->data_buf)) {
> return -EINVAL;
> }Reviewed-by: Gerd Hoffmann <[email protected]>
