On 04.07.2014 17:55, Kevin Wolf wrote:
If a read request goes across EOF, the block driver sees a shortened
request that stops at EOF (the rest is memsetted in block.c), however
the original qiov was used for this request.

This patch makes the qiov size match the request size, avoiding a
potential buffer overflow in raw-posix.

Signed-off-by: Kevin Wolf <[email protected]>
---
  block.c | 11 ++++++++++-
  1 file changed, 10 insertions(+), 1 deletion(-)

Reviewed-by: Max Reitz <[email protected]>

Reply via email to