Markus Armbruster d09acb9b5e fw_cfg: Splash image loader can overrun a stack variable, fix
read_splashfile() passes the address of an int variable as size_t *
parameter to g_file_get_contents(), with a cast to gag the compiler.

No problem on machines where sizeof(size_t) == sizeof(int).

Happens to work on my x86_64 box (64 bit little endian): the least
significant 32 bits of the file size end up in the right place
(caller's variable file_size), and the most significant 32 bits
clobber a place that gets assigned to before its next use (caller's
variable file_type).

I'd expect it to break on a 64 bit big-endian box.

Fix up the variable types and drop the problematic cast.

Signed-off-by: Markus Armbruster <armbru@redhat.com>
Reviewed-by: Laszlo Ersek <lersek@redhat.com>
Signed-off-by: Blue Swirl <blauwirbel@gmail.com>
2013-01-26 13:23:33 +00:00
2013-01-10 15:11:53 -06:00
2013-01-24 15:37:55 +01:00
2013-01-26 13:15:35 +00:00
2013-01-26 13:15:37 +00:00
2012-12-19 08:29:06 +01:00
2013-01-18 19:06:57 +01:00
2013-01-21 09:17:16 +01:00
2012-10-24 10:26:22 +02:00
2013-01-26 13:15:35 +00:00
2013-01-21 09:17:16 +01:00
2013-01-12 12:26:16 +00:00
2012-09-07 09:02:44 +03:00
2012-11-01 13:10:06 +01:00
2013-01-15 04:09:13 +01:00
2012-12-20 23:08:47 +01:00
2013-01-17 10:24:52 -02:00
2013-01-17 10:24:52 -02:00
2013-01-26 13:15:37 +00:00
2013-01-26 13:15:37 +00:00
2013-01-26 13:15:35 +00:00
2012-12-20 23:09:25 +01:00
2013-01-17 10:24:52 -02:00
2012-12-03 14:08:40 -06:00
2013-01-15 04:09:14 +01:00

Read the documentation in qemu-doc.html or on http://wiki.qemu.org

- QEMU team
S
Description
No description provided
Readme 600 MiB
Languages
C 83.1%
C++ 6.4%
Python 3.3%
Dylan 2.8%
Shell 1.5%
Other 2.6%