From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from eggs.gnu.org ([140.186.70.92]:59296)
	by lists.gnu.org with esmtp (Exim 4.71)
	(envelope-from <stefan.bosak@feikar.sk>) id 1QfHdA-00071O-He
	for qemu-devel@nongnu.org; Fri, 08 Jul 2011 16:26:33 -0400
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
	(envelope-from <stefan.bosak@feikar.sk>) id 1QfHd5-0007NE-NZ
	for qemu-devel@nongnu.org; Fri, 08 Jul 2011 16:26:32 -0400
Received: from vps-01-gentoo.developmententity.sk ([93.184.70.238]:35695
	helo=mx1.developmententity.sk) by eggs.gnu.org with esmtp (Exim 4.71)
	(envelope-from <stefan.bosak@feikar.sk>) id 1QfHd5-0007Mi-CP
	for qemu-devel@nongnu.org; Fri, 08 Jul 2011 16:26:27 -0400
Received: from [10.0.3.2] (static-78-141-117-224.orange.sk [78.141.117.224])
	(using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	(Authenticated sender: stefan.bosak@developmententity.sk)
	by mx1.developmententity.sk (Postfix) with ESMTPSA id DDD4CC05F9
	for <qemu-devel@nongnu.org>; Fri,  8 Jul 2011 22:26:21 +0200 (CEST)
Message-ID: <4E1767E8.40803@feikar.sk>
Date: Fri, 08 Jul 2011 22:26:16 +0200
From: Stefan BOSAK <stefan.bosak@feikar.sk>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Subject: [Qemu-devel] Fixed bug [Bug 38672] - bugzilla.kernel.org
List-Id: <qemu-devel.nongnu.org>
List-Unsubscribe: <https://lists.nongnu.org/mailman/options/qemu-devel>,
	<mailto:qemu-devel-request@nongnu.org?subject=unsubscribe>
List-Archive: <http://lists.nongnu.org/archive/html/qemu-devel>
List-Post: <mailto:qemu-devel@nongnu.org>
List-Help: <mailto:qemu-devel-request@nongnu.org?subject=help>
List-Subscribe: <https://lists.nongnu.org/mailman/listinfo/qemu-devel>,
	<mailto:qemu-devel-request@nongnu.org?subject=subscribe>
To: qemu-devel@nongnu.org

Hello.

Bug is in (xen-mapcache.c):

Reported-by: Steve <stefan.bosak@gmail.com>
Signed-off-by: Steve <stefan.bosak@gmail.com>

diff --git a/xen-mapcache.c b/xen-mapcache.c
index 57fe24d..1c3b5bf 100644
--- a/xen-mapcache.c
+++ b/xen-mapcache.c
@@ -107,7 +107,7 @@ void qemu_map_cache_init(void)
      size = mapcache->nr_buckets * sizeof (MapCacheEntry);
      size = (size + XC_PAGE_SIZE - 1) & ~(XC_PAGE_SIZE - 1);
      DPRINTF("qemu_map_cache_init, nr_buckets = %lx size %lu\n", 
mapcache->nr_buckets, size);
-    mapcache->entry = qemu_mallocz(size);
+    mapcache->entry = qemu_mallocz(size*sizeof(MapCacheEntry));
  }

static void qemu_remap_bucket(MapCacheEntry *entry,

Should somebody commit this fix ?

Thank you for your time.