Re: [PATCH] lsi53c895a: avoid out of bounds access to s->msg[]

On 31/3/24 20:17, Paolo Bonzini wrote: If no bytes are there to process in the message in phase, the input data latch (s->sidl) is set to s->msg[-1]. Just do nothing since no DMA is performed. Reported-by: Chuhong Yuan Signed-off-by: Paolo Bonzini --- hw/scsi/lsi53c895a.c | 19 -

[PATCH] lsi53c895a: avoid out of bounds access to s->msg[]

If no bytes are there to process in the message in phase, the input data latch (s->sidl) is set to s->msg[-1]. Just do nothing since no DMA is performed. Reported-by: Chuhong Yuan Signed-off-by: Paolo Bonzini --- hw/scsi/lsi53c895a.c | 19 --- 1 file changed, 12 insertions(+),