[Qemu-devel] [PATCH 01/34] linux-user: Fix array bounds in errno conversion

[Timothy E Baldwin]

Check array bounds in host_to_target_errno() and target_to_host_errno().

Signed-off-by: Timothy Edward Baldwin <address@hidden>
---
 linux-user/syscall.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/linux-user/syscall.c b/linux-user/syscall.c
index 264debc..4e40dc6 100644
--- a/linux-user/syscall.c
+++ b/linux-user/syscall.c
@@ -566,14 +566,14 @@ static uint16_t 
host_to_target_errno_table[ERRNO_TABLE_SIZE] = {
 
 static inline int host_to_target_errno(int err)
 {
-    if(host_to_target_errno_table[err])
+    if(err < ERRNO_TABLE_SIZE && host_to_target_errno_table[err])
         return host_to_target_errno_table[err];
     return err;
 }
 
 static inline int target_to_host_errno(int err)
 {
-    if (target_to_host_errno_table[err])
+    if (err < ERRNO_TABLE_SIZE && target_to_host_errno_table[err])
         return target_to_host_errno_table[err];
     return err;
 }
-- 
2.1.4