ia64/xen-unstable

changeset 12703:f19ddc0ee3e6

[QEMU] usb-uhci: Data buffer is too small

The data buffer is only 1280 bytes long but the user-supplied length
can be as large as 0x7ff. This patch extends the buffer to 2048
bytes.

Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
author kfraser@localhost.localdomain
date Thu Nov 30 17:33:11 2006 +0000 (2006-11-30)
parents f66f7c3a82a7
children 30fe5097cf7f
files tools/ioemu/hw/usb-uhci.c
line diff
     1.1 --- a/tools/ioemu/hw/usb-uhci.c	Thu Nov 30 17:32:16 2006 +0000
     1.2 +++ b/tools/ioemu/hw/usb-uhci.c	Thu Nov 30 17:33:11 2006 +0000
     1.3 @@ -421,7 +421,7 @@ static int uhci_broadcast_packet(UHCISta
     1.4  static int uhci_handle_td(UHCIState *s, UHCI_TD *td, int *int_mask)
     1.5  {
     1.6      uint8_t pid;
     1.7 -    uint8_t buf[1280];
     1.8 +    uint8_t buf[2048];
     1.9      int len, max_len, err, ret;
    1.10  
    1.11      if (td->ctrl & TD_CTRL_IOC) {