libxenguest: Add another range check to dom restore.

Signed-off-by: Keir Fraser <keir@xensource.com>

diff --git a/tools/libxc/xc_domain_restore.c b/tools/libxc/xc_domain_restore.c
index 3193ce191c7f22d484585a6c6a7cae89943564ce..e7ff90dcfd73553a5f40622df5d087b5a7fc5b5e 100644 (file)
--- a/tools/libxc/xc_domain_restore.c
+++ b/tools/libxc/xc_domain_restore.c
@@ -465,7 +465,7 @@ int xc_domain_restore(int xc_handle, int io_fd, uint32_t dom,
         if ( j == 0 )
             break;  /* our work here is done */
 
-        if ( j > MAX_BATCH_SIZE )
+        if ( (j > MAX_BATCH_SIZE) || (j < 0) )
         {
             ERROR("Max batch size exceeded. Giving up.");
             goto out;