On Mon, 6 Jul 2026 at 21:44, Philippe Mathieu-Daudé
<[email protected]> wrote:
>
> On 6/7/26 19:54, Peter Maydell wrote:
> > In vmxnet3_io_bar0_write(), we try to bounds-check the TX queue index
> > provided by the guest against the total number of queues.  However,
> > we have an off-by-one error: the valid indexes are from 0 to
> > txq_num-1, so we need a "<" comparison, not "<=".
> >
> > Cc: [email protected]
> > Resolves: https://gitlab.com/qemu-project/qemu/-/work_items/3780
> > Signed-off-by: Peter Maydell <[email protected]>
> > ---
> >   hw/net/vmxnet3.c | 2 +-
> >   1 file changed, 1 insertion(+), 1 deletion(-)
>
> Reviewed-by: Philippe Mathieu-Daudé <[email protected]>

Thanks; I'll take this via target-arm.next as I'm putting
together a pullreq.

-- PMM

Reply via email to