From: Michael S. Tsirkin <mst@redhat.com>
Date: Wed, 7 Jan 2015 08:51:00 +0000 (+0200)
Subject: vhost/net: length miscalculation
X-Git-Tag: fixes-v4.0-rc1~334^2
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=99975cc6ada0d5f2675e83abecae05aba5f437d2;p=pandora-kernel.git

vhost/net: length miscalculation

commit 8b38694a2dc8b18374310df50174f1e4376d6824
    vhost/net: virtio 1.0 byte swap
had this chunk:
-       heads[headcount - 1].len += datalen;
+       heads[headcount - 1].len = cpu_to_vhost32(vq, len - datalen);

This adds datalen with the wrong sign, causing guest panics.

Fixes: 8b38694a2dc8b18374310df50174f1e4376d6824
Reported-by: Alex Williamson <alex.williamson@redhat.com>
Suggested-by: Greg Kurz <gkurz@linux.vnet.ibm.com>
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
---

Reading git-diff-tree failed