diff options
| author | Alexey Kardashevskiy <aik@ozlabs.ru> | 2014-04-07 22:53:21 +1000 |
|---|---|---|
| committer | Michael Roth <mdroth@linux.vnet.ibm.com> | 2014-06-29 15:58:43 -0500 |
| commit | 74dd27cecb97a97a53f95094981eceb9cbd3b2f2 (patch) | |
| tree | 29531fa9f0cff36bb8ef56f69ae17cef6630b168 /hw/misc/tmp105.c | |
| parent | b6760b6203cb22ce6343c947a1dc14d61d1f1619 (diff) | |
spapr_pci: Fix number of returned vectors in ibm, change-msi
Current guest kernels try allocating as many vectors as the quota is.
For example, in the case of virtio-net (which has just 3 vectors)
the guest requests 4 vectors (that is the quota in the test) and
the existing ibm,change-msi handler returns 4. But before it returns,
it calls msix_set_message() in a loop and corrupts memory behind
the end of msix_table.
This limits the number of vectors returned by ibm,change-msi to
the maximum supported by the actual device.
Signed-off-by: Alexey Kardashevskiy <aik@ozlabs.ru>
Cc: qemu-stable@nongnu.org
[agraf: squash in bugfix from aik]
Signed-off-by: Alexander Graf <agraf@suse.de>
(cherry picked from commit b26696b519f853c9844e5154858e583600ee3cdc)
*s/error_report/fprintf/ to reflect v1.7.x error reporting style
Signed-off-by: Michael Roth <mdroth@linux.vnet.ibm.com>
Diffstat (limited to 'hw/misc/tmp105.c')
0 files changed, 0 insertions, 0 deletions