Message ID | 1344519511-18147-7-git-send-email-pbonzini@redhat.com |
---|---|
State | New |
Headers | show |
diff --git a/hw/scsi-disk.c b/hw/scsi-disk.c index 3baa238..dd7ae6d 100644 --- a/hw/scsi-disk.c +++ b/hw/scsi-disk.c @@ -1712,7 +1712,8 @@ static int32_t scsi_disk_emulate_command(SCSIRequest *req, uint8_t *buf) scsi_check_condition(r, SENSE_CODE(WRITE_PROTECTED)); return 0; } - if (r->req.cmd.lba > s->qdev.max_lba) { + if (r->req.cmd.lba > r->req.cmd.lba + nb_sectors || + r->req.cmd.lba + nb_sectors - 1 > s->qdev.max_lba) { goto illegal_lba; }
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com> --- hw/scsi-disk.c | 3 ++- 1 file modificato, 2 inserzioni(+). 1 rimozione(-)