diff options
author | Vladimir Sementsov-Ogievskiy <vsementsov@virtuozzo.com> | 2016-06-14 20:08:12 +0300 |
---|---|---|
committer | Max Reitz <mreitz@redhat.com> | 2016-06-16 15:20:37 +0200 |
commit | 0e321191224c8cd137eef41da3257e096965c3d6 (patch) | |
tree | 0f9d28aba34318ee06c89a7ee1f4d54a8cc9f1ed /util | |
parent | 3dd48fdc55613c102f2811c63ceefd9aebcd44ca (diff) | |
download | qemu-0e321191224c8cd137eef41da3257e096965c3d6.tar.gz qemu-0e321191224c8cd137eef41da3257e096965c3d6.tar.bz2 qemu-0e321191224c8cd137eef41da3257e096965c3d6.zip |
hbitmap: add 'pos < size' asserts
For now, fail in hbitmap_set on start + count > size will come from
hbitmap_set
hb_count_between
hbitmap_iter_init
assert(pos < hb->size)
This patch adds such checks to set/get/reset functions of hbitmap.
Signed-off-by: Vladimir Sementsov-Ogievskiy <vsementsov@virtuozzo.com>
Message-id: 1465924093-76875-2-git-send-email-vsementsov@virtuozzo.com
Signed-off-by: Max Reitz <mreitz@redhat.com>
Diffstat (limited to 'util')
-rw-r--r-- | util/hbitmap.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/util/hbitmap.c b/util/hbitmap.c index 7121b11c01..99fd2ba37b 100644 --- a/util/hbitmap.c +++ b/util/hbitmap.c @@ -269,6 +269,7 @@ void hbitmap_set(HBitmap *hb, uint64_t start, uint64_t count) start >>= hb->granularity; last >>= hb->granularity; count = last - start + 1; + assert(last < hb->size); hb->count += count - hb_count_between(hb, start, last); hb_set_between(hb, HBITMAP_LEVELS - 1, start, last); @@ -348,6 +349,7 @@ void hbitmap_reset(HBitmap *hb, uint64_t start, uint64_t count) start >>= hb->granularity; last >>= hb->granularity; + assert(last < hb->size); hb->count -= hb_count_between(hb, start, last); hb_reset_between(hb, HBITMAP_LEVELS - 1, start, last); @@ -371,6 +373,7 @@ bool hbitmap_get(const HBitmap *hb, uint64_t item) /* Compute position and bit in the last layer. */ uint64_t pos = item >> hb->granularity; unsigned long bit = 1UL << (pos & (BITS_PER_LONG - 1)); + assert(pos < hb->size); return (hb->levels[HBITMAP_LEVELS - 1][pos >> BITS_PER_LEVEL] & bit) != 0; } |