diff options
| author | Reza Jelveh <reza.jelveh@tuhh.de> | 2014-07-01 13:13:27 +0200 |
|---|---|---|
| committer | Stefan Hajnoczi <stefanha@redhat.com> | 2014-07-07 09:15:29 +0200 |
| commit | d02f8adc6d2a178bcbf77d0413f9a96fdbed53f0 (patch) | |
| tree | 002176c41fd505217c0fc7bda156d5dd8c7e9d46 /target-s390x/insn-format.def | |
| parent | 37253e1ec898b167c5ff1fe63e14914bd35e28d9 (diff) | |
| download | qemu-d02f8adc6d2a178bcbf77d0413f9a96fdbed53f0.zip | |
ahci.c: mask unused flags when reading size PRDT DBC
The data byte count(DBC) read from the description information is defined for
bits 21:00. Bits 30:22 are reserved and bit 31 is the Interrupt on Completion
(I) flag.
Completion interrupts are triggered after every transaction instead of on
I-flag in QEMU. tbl_entry_size is a signed integer and improperly reading the
DBC leads to a negative offset that causes sglist allocation to fail.
Signed-off-by: Reza Jelveh <reza.jelveh@tuhh.de>
Reviewed-by: Alexander Graf <agraf@suse.de>
Reviewed-by: Kevin Wolf <kwolf@redhat.com>
Reviewed-by: John Snow <jsnow@redhat.com>
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
Diffstat (limited to 'target-s390x/insn-format.def')
0 files changed, 0 insertions, 0 deletions