Re: [Qemu-devel] [PATCH v5 23/24] usb: sanity check setup_index+setup_len in post_load

[Gerd Hoffmann]

On Do, 2014-04-03 at 19:52 +0300, Michael S. Tsirkin wrote:
> -    if (dev->setup_index >= sizeof(dev->data_buf) ||
> +    if (dev->setup_index < 0 ||
> +        dev->setup_len < 0 ||
> +        dev->setup_index >= sizeof(dev->data_buf) ||
>          dev->setup_len >= sizeof(dev->data_buf)) {
>          return -EINVAL;
>      }

Reviewed-by: Gerd Hoffmann <kra...@redhat.com>