From: Gerd Hoffmann <kraxel@redhat.com>
Date: Wed, 29 Oct 2025 10:55:52 +0000 (+0100)
Subject: igvm: fix off by one bug in memmap entry count checking
X-Git-Tag: v10.2.0-rc1~27^2~3
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=dd020b4e6baa27012d06fd7bee67c32f1cf78acc;p=thirdparty%2Fqemu.git

igvm: fix off by one bug in memmap entry count checking

Fixes: c1d466d267 ("backends/igvm: Add IGVM loader and configuration")
Reviewed-by: Luigi Leonardi <leonardi@redhat.com>
Reviewed-by: Stefano Garzarella <sgarzare@redhat.com>
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
Message-ID: <20251029105555.2492276-3-kraxel@redhat.com>
---

diff --git a/backends/igvm.c b/backends/igvm.c
index 723d45b755..055bbba745 100644
--- a/backends/igvm.c
+++ b/backends/igvm.c
@@ -567,7 +567,7 @@ static int qigvm_directive_memory_map(QIgvm *ctx, const uint8_t *header_data,
 
             retval = ctx->cgsc->get_mem_map_entry(entry, &cgmm_entry, errp);
             while (retval == 0) {
-                if (entry > max_entry_count) {
+                if (entry >= max_entry_count) {
                     error_setg(
                         errp,
                         "IGVM: guest memory map size exceeds parameter area defined in IGVM file");