hw/slavio_intctl.c:299: error: array subscript is above array bounds
Bug #709711 reported by
Loïc Minier
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Linaro QEMU |
Fix Released
|
High
|
Unassigned |
Bug Description
Hey
Can't report this against the Ubuntu qemu-linaro source package yet, so filing it here in the mean time:
qemu-linaro RC package prepared by Steve Langasek failed to build in the maverick Linaro tools PPA with:
CC sparc-softmmu/
cc1: warnings being treated as errors
/build/
/build/
/build/
Cheers,
Changed in qemu-linaro: | |
milestone: | 2011.02-rc1 → 2011.02-rc2 |
Changed in qemu-linaro: | |
status: | Fix Committed → Fix Released |
Changed in qemu-linaro: | |
status: | Fix Released → Fix Committed |
Changed in qemu-linaro: | |
status: | Fix Committed → Fix Released |
To post a comment you must log in.
typedef struct SLAVIO_INTCTLState { MAX_CPUS] [MAX_PILS] ; CPUINTCTLState slaves[MAX_CPUS];
SysBusDevice busdev;
uint32_t intregm_pending;
uint32_t intregm_disabled;
uint32_t target_cpu;
#ifdef DEBUG_IRQ_COUNT
uint64_t irq_count[32];
#endif
qemu_irq cpu_irqs[
SLAVIO_
} SLAVIO_INTCTLState;
[...]
for (j = MAX_PILS; j > 0; j--) {
if (!(s->slaves[ i].irl_ out & (1 << j))) {
qemu_ irq_raise( s->cpu_ irqs[i] [j]);
}
if (s->slaves[ i].irl_ out & (1 << j)) {
qemu_ irq_lower( s->cpu_ irqs[i] [j]);
}
if (pil_pending & (1 << j)) {
} else {
}
}
j starts at MAX_PILS, so [j] is out of array bounds