1 files changed, 9 insertions, 3 deletions

diff --git a/virt/kvm/coalesced_mmio.c b/virt/kvm/coalesced_mmio.c
index a6ec206f36ba..88b2fe3ddf42 100644
--- a/virt/kvm/coalesced_mmio.c
+++ b/virt/kvm/coalesced_mmio.c
@@ -28,9 +28,15 @@ static int coalesced_mmio_in_range(struct kvm_coalesced_mmio_dev *dev,
          * (addr,len) is fully included in
          * (zone->addr, zone->size)
          */
-
-        return (dev->zone.addr <= addr &&
-                addr + len <= dev->zone.addr + dev->zone.size);
+        if (len < 0)
+                return 0;
+        if (addr + len < addr)
+                return 0;
+        if (addr < dev->zone.addr)
+                return 0;
+        if (addr + len > dev->zone.addr + dev->zone.size)
+                return 0;
+        return 1;
 }
 
 static int coalesced_mmio_has_room(struct kvm_coalesced_mmio_dev *dev)