From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:39880) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XrLrg-0006sS-AS for qemu-devel@nongnu.org; Thu, 20 Nov 2014 02:09:22 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1XrLra-0003u3-6q for qemu-devel@nongnu.org; Thu, 20 Nov 2014 02:09:16 -0500 Received: from mx1.redhat.com ([209.132.183.28]:59738) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XrLra-0003tw-07 for qemu-devel@nongnu.org; Thu, 20 Nov 2014 02:09:10 -0500 Message-ID: <546D9380.2050606@redhat.com> Date: Thu, 20 Nov 2014 08:08:48 +0100 From: Paolo Bonzini MIME-Version: 1.0 References: <1416463034-8264-1-git-send-email-arei.gonglei@huawei.com> <1416463034-8264-4-git-send-email-arei.gonglei@huawei.com> <546D8BDA.9080205@redhat.com> <546D8DD2.30304@huawei.com> In-Reply-To: <546D8DD2.30304@huawei.com> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit Subject: Re: [Qemu-devel] [PATCH 3/4] pcnet: fix Negative array index read List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Gonglei Cc: "qemu-devel@nongnu.org" , "stefanha@redhat.com" , "Huangpeng (Peter)" On 20/11/2014 07:44, Gonglei wrote: > Maybe not, since two branch are "if and else if" not "if and else", > so this change make the below code segment's wide ... >> > bcnt = 4096 - GET_FIELD(tmd.length, TMDL, BCNT); >> > s->phys_mem_read(s->dma_opaque, PHYSADDR(s, tmd.tbadr), >> > s->buffer + s->xmit_pos, bcnt, CSR_BSWP(s)); >> > s->xmit_pos += bcnt; > ... more extensive. After your patch that fixes the coverity report, they are if (a && b) else if (b) so you can change it to if (!b) goto txdone; if (a) ... else ... and then if (!b) goto txdone; if (!a) { } Paolo