From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([140.186.70.92]:51526) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1R73sc-00057f-6K for qemu-devel@nongnu.org; Fri, 23 Sep 2011 07:25:19 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1R73sa-00013D-U8 for qemu-devel@nongnu.org; Fri, 23 Sep 2011 07:25:18 -0400 Received: from mail-gx0-f173.google.com ([209.85.161.173]:36110) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1R73sa-00012l-OU for qemu-devel@nongnu.org; Fri, 23 Sep 2011 07:25:16 -0400 Received: by gxk25 with SMTP id 25so3096600gxk.4 for ; Fri, 23 Sep 2011 04:25:16 -0700 (PDT) From: Frediano Ziglio Date: Fri, 23 Sep 2011 13:25:56 +0200 Message-Id: <1316777156-21477-1-git-send-email-freddy77@gmail.com> Subject: [Qemu-devel] [PATCH] qcow2: fix 028 iotest List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: kwolf@redhat.com Cc: qemu-devel@nongnu.org, Frediano Ziglio This fix bound check bug accessing last cluster if image size is not cluster aligned caused by "Unlock during COW" patch. Signed-off-by: Frediano Ziglio --- block/qcow2-cluster.c | 8 ++++++-- block/qcow2.c | 2 +- block/qcow2.h | 2 ++ 3 files changed, 9 insertions(+), 3 deletions(-) diff --git a/block/qcow2-cluster.c b/block/qcow2-cluster.c index c9a1b1c..78e1b49 100644 --- a/block/qcow2-cluster.c +++ b/block/qcow2-cluster.c @@ -295,16 +295,20 @@ static int copy_sectors(BlockDriverState *bs, uint64_t start_sect, BDRVQcowState *s = bs->opaque; int n, ret; void *buf; + QEMUIOVector qiov; + struct iovec iov; n = n_end - n_start; if (n <= 0) { return 0; } - buf = qemu_blockalign(bs, n * BDRV_SECTOR_SIZE); + iov.iov_base = buf = qemu_blockalign(bs, n * BDRV_SECTOR_SIZE); + iov.iov_len = n * BDRV_SECTOR_SIZE; + qemu_iovec_init_external(&qiov, &iov, 1); BLKDBG_EVENT(bs->file, BLKDBG_COW_READ); - ret = bdrv_read(bs, start_sect + n_start, buf, n); + ret = qcow2_co_readv(bs, start_sect + n_start, n, &qiov); if (ret < 0) { goto out; } diff --git a/block/qcow2.c b/block/qcow2.c index 510ff68..fd90881 100644 --- a/block/qcow2.c +++ b/block/qcow2.c @@ -376,7 +376,7 @@ int qcow2_backing_read1(BlockDriverState *bs, QEMUIOVector *qiov, return n1; } -static int qcow2_co_readv(BlockDriverState *bs, int64_t sector_num, +int qcow2_co_readv(BlockDriverState *bs, int64_t sector_num, int remaining_sectors, QEMUIOVector *qiov) { BDRVQcowState *s = bs->opaque; diff --git a/block/qcow2.h b/block/qcow2.h index 531af39..7f5ff42 100644 --- a/block/qcow2.h +++ b/block/qcow2.h @@ -176,6 +176,8 @@ static inline int64_t align_offset(int64_t offset, int n) /* qcow2.c functions */ int qcow2_backing_read1(BlockDriverState *bs, QEMUIOVector *qiov, int64_t sector_num, int nb_sectors); +int qcow2_co_readv(BlockDriverState *bs, int64_t sector_num, + int remaining_sectors, QEMUIOVector *qiov); /* qcow2-refcount.c functions */ int qcow2_refcount_init(BlockDriverState *bs); -- 1.7.1