mirror of
https://github.com/qemu/qemu.git
synced 2025-01-23 22:13:25 +08:00
hw/arm_timer.c: Fix bounds check for Integrator timer accesses
There are only three counter/timers on the integrator board: correct the bounds check to avoid an array overrun. (Spotted by Coverity, see bug 887883). Signed-off-by: Peter Maydell <peter.maydell@linaro.org> Signed-off-by: Anthony Liguori <aliguori@us.ibm.com>
This commit is contained in:
parent
afd4a65225
commit
ee71c98434
@ -269,7 +269,7 @@ static uint64_t icp_pit_read(void *opaque, target_phys_addr_t offset,
|
||||
|
||||
/* ??? Don't know the PrimeCell ID for this device. */
|
||||
n = offset >> 8;
|
||||
if (n > 3) {
|
||||
if (n > 2) {
|
||||
hw_error("sp804_read: Bad timer %d\n", n);
|
||||
}
|
||||
|
||||
@ -283,7 +283,7 @@ static void icp_pit_write(void *opaque, target_phys_addr_t offset,
|
||||
int n;
|
||||
|
||||
n = offset >> 8;
|
||||
if (n > 3) {
|
||||
if (n > 2) {
|
||||
hw_error("sp804_write: Bad timer %d\n", n);
|
||||
}
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user