On 23.01.2025 10:01, Roger Pau Monné wrote:
> On Tue, Oct 01, 2024 at 10:50:25AM +0200, Jan Beulich wrote:
>> --- a/xen/arch/x86/hvm/emulate.c
>> +++ b/xen/arch/x86/hvm/emulate.c
>> @@ -1084,7 +1084,7 @@ static int hvmemul_linear_mmio_access(
>> {
>> struct hvm_vcpu_io *hvio = ¤t->arch.hvm.hvm_io;
>> unsigned long offset = gla & ~PAGE_MASK;
>> - unsigned int chunk, buffer_offset = gla - start;
>> + unsigned int buffer_offset = gla - start;
>> struct hvm_mmio_cache *cache = hvmemul_find_mmio_cache(hvio, start, dir,
>> buffer_offset);
>> paddr_t gpa;
>> @@ -1094,13 +1094,17 @@ static int hvmemul_linear_mmio_access(
>> if ( cache == NULL )
>> return X86EMUL_UNHANDLEABLE;
>>
>> - chunk = min_t(unsigned int, size, PAGE_SIZE - offset);
>> + if ( size > PAGE_SIZE - offset )
>
> FWIW, I find this easier to read as `size + offset > PAGE_SIZE` (which
> is the same condition used in linear_{read,write}().
Hmm, yes, considering that "size" here is specifically what "bytes" is there,
doing the change is okay. However, in general I prefer the way it was written
above, for being more obviously safe against overflow (taking into account
how "offset" is calculated).
> Preferably with that adjusted:
>
> Acked-by: Roger Pau Monné <[email protected]>
Thanks.
Jan