xemu/hw/net
Gonglei 7b50d00911 pcnet: fix Negative array index read
s->xmit_pos maybe assigned to a negative value (-1),
but in this branch variable s->xmit_pos as an index to
array s->buffer. Let's add a check for s->xmit_pos.

Signed-off-by: Gonglei <arei.gonglei@huawei.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Reviewed-by: Jason Wang <jasowang@redhat.com>
Reviewed-by: Jason Wang <jasowang@redhat.com>
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
2014-11-21 10:50:54 +00:00
..
fsl_etsec Fix typo in eTSEC Ethernet controller 2014-06-16 13:24:26 +02:00
allwinner_emac.c allwinner-emac: update irq status after writes to interrupt registers 2014-04-17 21:34:06 +01:00
cadence_gem.c net: cadence_gem: Remove &desc[0] usages 2014-06-10 19:39:34 +04:00
dp8393x.c nic: do not destroy memory regions in cleanup functions 2014-08-17 23:25:24 +02:00
e1000_regs.h e1000: improve auto-negotiation reporting via mii-tool 2014-06-23 17:38:00 +03:00
e1000.c bootindex: move calling add_boot_device_patch to bootindex setter function 2014-10-15 10:46:01 +02:00
eepro100.c bootindex: move calling add_boot_device_patch to bootindex setter function 2014-10-15 10:46:01 +02:00
etraxfs_eth.c hw: cannot_instantiate_with_device_add_yet due to pointer props 2013-12-24 17:27:17 +01:00
lan9118.c Fix lan9118 buffer length handling 2014-01-27 15:44:06 +01:00
lance.c pcnet: add bootindex to qom property 2014-10-15 09:52:54 +02:00
Makefile.objs Add Enhanced Three-Speed Ethernet Controller (eTSEC) 2014-03-05 03:06:45 +01:00
mcf_fec.c nic: do not destroy memory regions in cleanup functions 2014-08-17 23:25:24 +02:00
milkymist-minimac2.c memory: add parameter errp to memory_region_init_ram 2014-09-09 13:41:43 +02:00
mipsnet.c savevm: Remove all the unneeded version_minimum_id_old (rest) 2014-05-14 15:24:51 +02:00
ne2000-isa.c ne2000: add bootindex to qom property 2014-10-15 09:52:54 +02:00
ne2000.c bootindex: move calling add_boot_device_patch to bootindex setter function 2014-10-15 10:46:01 +02:00
ne2000.h ne2000: pass device to ne2000_setup_io, use it as owner 2013-07-04 17:42:46 +02:00
opencores_eth.c opencores_eth: flush queue whenever can_receive can go from false to true 2014-02-25 11:50:16 +01:00
pcnet-pci.c pcnet: add bootindex to qom property 2014-10-15 09:52:54 +02:00
pcnet.c pcnet: fix Negative array index read 2014-11-21 10:50:54 +00:00
pcnet.h pcnet: add bootindex to qom property 2014-10-15 09:52:54 +02:00
rtl8139.c bootindex: move calling add_boot_device_patch to bootindex setter function 2014-10-15 10:46:01 +02:00
smc91c111.c savevm: Remove all the unneeded version_minimum_id_old (arm) 2014-05-13 16:09:35 +01:00
spapr_llan.c bootindex: move calling add_boot_device_patch to bootindex setter function 2014-10-15 10:46:01 +02:00
stellaris_enet.c memory: remove memory_region_destroy 2014-08-18 12:06:21 +02:00
vhost_net.c virtio: Import virtio_vring.h 2014-09-22 11:39:49 +01:00
virtio-net.c bootindex: move calling add_boot_device_patch to bootindex setter function 2014-10-15 10:46:01 +02:00
vmware_utils.h exec: Make stb_phys input an AddressSpace 2014-02-11 22:57:38 +10:00
vmxnet3.c bootindex: move calling add_boot_device_patch to bootindex setter function 2014-10-15 10:46:01 +02:00
vmxnet3.h vmxnet3: Eliminate __packed redefined warning 2013-09-06 17:25:55 +02:00
vmxnet_debug.h hw: move target-independent files to subdirectories 2013-04-08 18:13:12 +02:00
vmxnet_rx_pkt.c hw: move target-independent files to subdirectories 2013-04-08 18:13:12 +02:00
vmxnet_rx_pkt.h hw: move target-independent files to subdirectories 2013-04-08 18:13:12 +02:00
vmxnet_tx_pkt.c misc: Use g_assert_not_reached for code which is expected to be unreachable 2013-07-27 11:22:54 +04:00
vmxnet_tx_pkt.h hw: move target-independent files to subdirectories 2013-04-08 18:13:12 +02:00
xen_nic.c hw: move target-independent files to subdirectories 2013-04-08 18:13:12 +02:00
xgmac.c savevm: Remove all the unneeded version_minimum_id_old (arm) 2014-05-13 16:09:35 +01:00
xilinx_axienet.c hw: Consistently name Error * objects err, and not errp 2014-05-05 19:08:49 +02:00
xilinx_ethlite.c net: xilinx_ethlite: Fix Rx-pong interrupt 2014-06-09 15:38:58 +02:00