David S. Ahern 4ab4183d76 segfault due to buffer overrun in usb-serial
This fixes a segfault due to buffer overrun in the usb-serial device.
The memcpy was incrementing the start location by recv_used yet, the
computation of first_size (how much to write at the end of the buffer
before wrapping to the front) was not accounting for it. This causes the
next element after the receive buffer (recv_ptr) to get overwritten with
random data.

Signed-off-by: David Ahern <daahern@cisco.com>
Signed-off-by: Anthony Liguori <aliguori@us.ibm.com>
2010-02-10 12:45:11 -06:00
2010-02-10 11:56:57 -06:00
2010-01-13 17:14:16 -06:00
2010-02-06 23:16:05 +01:00
2010-01-27 17:47:33 +00:00
2010-02-10 11:57:02 -06:00
2010-02-03 12:36:25 -06:00
2010-02-07 02:03:50 +03:00
2010-01-08 09:58:40 -06:00
2008-12-13 09:32:43 +00:00
2009-09-12 07:36:22 +00:00
2009-09-12 07:36:22 +00:00
2009-05-13 20:54:26 +01:00
2004-08-01 21:54:53 +00:00
2009-10-27 12:28:59 -05:00
2009-09-25 19:53:21 +00:00
2009-10-05 09:32:44 -05:00
2010-02-10 11:57:03 -06:00
2009-03-10 21:43:35 +00:00
2010-02-07 02:03:50 +03:00
2009-01-14 18:39:49 +00:00
2009-12-18 11:26:27 -06:00
2009-11-17 08:49:38 -06:00
2009-10-08 21:17:18 -05:00
2009-11-21 09:06:46 +00:00
2009-10-01 16:12:16 -05:00
2008-10-12 17:54:42 +00:00
2010-02-09 16:56:13 -06:00
2010-02-03 19:47:34 -02:00
2009-10-01 16:12:16 -05:00
2009-10-01 16:12:16 -05:00
2009-09-20 06:56:26 +00:00
2008-10-27 19:49:12 +00:00
2009-10-05 09:32:44 -05:00
2009-11-14 01:19:12 +01:00
2009-10-01 16:12:16 -05:00
2009-10-01 16:12:16 -05:00
2009-10-01 16:12:16 -05:00
2009-12-05 17:36:00 +01:00
2009-09-12 07:36:22 +00:00
2010-02-09 16:56:13 -06:00
2009-12-17 18:12:04 +01:00
2007-09-16 20:03:23 +00:00
2009-07-02 17:54:34 +00:00
2010-01-13 17:14:14 -06:00
2009-10-01 16:12:16 -05:00
2009-10-01 16:12:16 -05:00
2009-10-01 16:12:16 -05:00
2009-11-17 08:49:39 -06:00
2009-11-17 08:49:39 -06:00
2009-11-17 08:49:39 -06:00
2009-10-01 16:12:16 -05:00
2009-10-01 16:12:16 -05:00
2010-02-09 16:56:13 -06:00
2008-12-14 08:50:18 +00:00
2009-10-27 12:28:59 -05:00
2009-10-01 16:12:16 -05:00
2010-02-06 19:24:42 +01:00
2010-01-08 09:58:40 -06:00
2010-01-08 09:58:40 -06:00
2010-02-07 02:03:50 +03:00
2010-02-07 02:03:50 +03:00
2010-02-07 02:03:50 +03:00
2010-02-07 02:03:50 +03:00
2010-02-07 02:03:50 +03:00
2009-09-12 07:36:22 +00:00
2010-02-10 11:57:02 -06:00
2010-02-10 11:57:02 -06:00
2009-12-12 07:59:43 -06:00
2010-01-08 09:58:40 -06:00
2009-12-03 09:41:29 -06:00
2009-12-25 18:19:15 +00:00
2009-11-17 08:49:39 -06:00
2009-11-17 08:49:39 -06:00
2010-02-03 12:36:25 -06:00
2010-02-03 12:36:25 -06:00
2009-10-27 12:28:59 -05:00
2009-12-18 11:26:27 -06:00
2010-01-13 17:14:15 -06:00
2010-01-26 15:42:02 -06:00
2009-10-01 16:12:16 -05:00
2009-07-22 10:58:49 -05:00
2010-02-09 16:56:13 -06:00
2009-11-17 08:49:38 -06:00
2009-11-17 08:49:38 -06:00
2009-09-04 09:37:29 -05:00
2009-12-03 09:41:18 -06:00
2010-01-26 15:42:01 -06:00
2009-12-03 09:41:20 -06:00
2008-12-14 08:50:18 +00:00
2010-01-08 16:55:03 -06:00
2010-01-26 15:45:06 -06:00
2009-10-01 16:12:16 -05:00
2009-06-29 08:52:44 -05:00
2009-07-08 18:25:37 +04:00
2010-01-26 16:28:46 -06:00
2009-11-14 01:19:12 +01:00
2009-04-07 21:47:27 +00:00
2009-09-13 19:38:43 +00:00
2009-10-01 16:12:16 -05:00
2008-12-04 11:29:42 +00:00
2009-10-01 16:12:16 -05:00
2010-02-07 02:03:50 +03:00
2009-03-05 23:01:23 +00:00
2008-09-06 16:31:30 +00:00
2009-10-01 16:12:16 -05:00
2009-03-06 23:44:29 +00:00
2009-03-06 23:44:29 +00:00
2009-03-06 23:44:29 +00:00
2009-03-06 23:44:29 +00:00

Read the documentation in qemu-doc.html.

Fabrice Bellard.
Description
A fork of QEMU-Nyx which is better suited for my bachelors thesis
Readme 154 MiB