| commit | a7104eda7dab99d0cdbd3595c211864cba415905 | |
| author | Prasad J Pandit <pjp@fedoraproject.org> | |
| Sun, 13 Jan 2019 17:59:48 +0000 (13 23:29 +0530) | ||
| committer | Samuel Thibault <samuel.thibault@ens-lyon.org> | |
| Mon, 14 Jan 2019 22:36:38 +0000 (14 23:36 +0100) | ||
| tree | 7e0b56c8ce1fa1b553560b0f6918e9db824a2dfc | treesnapshot (tar.gz zip) |
| parent | 55ef9c617b4297d324cabfb68e6cea772349f5b4 | commitdiff |
slirp: check data length while emulating ident function
While emulating identification protocol, tcp_emu() does not check
available space in the 'sc_rcv->sb_data' buffer. It could lead to
heap buffer overflow issue. Add check to avoid it.
Reported-by: Kira <864786842@qq.com>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Signed-off-by: Samuel Thibault <samuel.thibault@ens-lyon.org>
While emulating identification protocol, tcp_emu() does not check
available space in the 'sc_rcv->sb_data' buffer. It could lead to
heap buffer overflow issue. Add check to avoid it.
Reported-by: Kira <864786842@qq.com>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Signed-off-by: Samuel Thibault <samuel.thibault@ens-lyon.org>
| slirp/tcp_subr.c | diffblobblamehistory |