sim-card
/
qemu
Archived
10
0
Fork 0

hw/arm_timer.c: Fix bounds check for Integrator timer accesses

There are only three counter/timers on the integrator board:
correct the bounds check to avoid an array overrun. (Spotted
by Coverity, see bug 887883).

Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
Signed-off-by: Anthony Liguori <aliguori@us.ibm.com>
This commit is contained in:
Peter Maydell 2011-11-11 13:30:15 +00:00 committed by Anthony Liguori
parent afd4a65225
commit ee71c98434
1 changed files with 2 additions and 2 deletions

View File

@ -269,7 +269,7 @@ static uint64_t icp_pit_read(void *opaque, target_phys_addr_t offset,
/* ??? Don't know the PrimeCell ID for this device. */
n = offset >> 8;
if (n > 3) {
if (n > 2) {
hw_error("sp804_read: Bad timer %d\n", n);
}
@ -283,7 +283,7 @@ static void icp_pit_write(void *opaque, target_phys_addr_t offset,
int n;
n = offset >> 8;
if (n > 3) {
if (n > 2) {
hw_error("sp804_write: Bad timer %d\n", n);
}