scsi-disk: fix buffer overflow
authorGerd Hoffmann <kraxel@redhat.com>
Wed, 10 Mar 2010 16:47:17 +0000 (17:47 +0100)
committerAnthony Liguori <aliguori@us.ibm.com>
Wed, 17 Mar 2010 16:17:05 +0000 (11:17 -0500)
commite3c5497a20f397e6baf8d88918a0d7061279b3ad
tree238d936e990c1b60386ecf9cc64d896603805191
parent32c91e1579f60e332d0c7f8b8cd940144db319ed
scsi-disk: fix buffer overflow

In case s->version is shorter than 4 bytes we overflow the memcpy src
buffer.  Fix it by clearing the target buffer, then copy only the
amount of bytes we actually have.

Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Signed-off-by: Anthony Liguori <aliguori@us.ibm.com>
hw/scsi-disk.c