-
由 Stefano Stabellini 提交于
src is stored in shared memory and src->nr_segments is dereferenced twice at the end of the function. If a compiler decides to compile this into two separate memory accesses then the size limitation could be bypassed. Fix it by removing the double access to src->nr_segments. This is part of XSA-155. Signed-off-by: NStefano Stabellini <stefano.stabellini@eu.citrix.com>
f9e98e5d