diff options
| author | Bruce Rogers <brogers@novell.com> | 2011-02-05 14:47:56 -0700 |
|---|---|---|
| committer | Justin M. Forbes <jforbes@redhat.com> | 2011-02-14 14:19:12 -0600 |
| commit | bd2483faf127abe9fa5abc3c8e199f5e7d6534d3 (patch) | |
| tree | 7227d739f5245df81f7f3173ca171c04205f9086 /hw | |
| parent | 7083b66b45571c610cc0a9dedff761da8ebe013f (diff) | |
| download | qemu-bd2483faf127abe9fa5abc3c8e199f5e7d6534d3.tar.gz | |
PATCH] slirp: fix buffer overrun
Since the addition of the slirp member to struct mbuf, the value of
SLIRP_MSIZE and the initialization of m_size have not been correct,
resulting in overrunning the end of the malloc'd buffer in some cases.
Signed-off-by: Bruce Rogers <brogers@novell.com>
Signed-off-by: Anthony Liguori <aliguori@us.ibm.com>
Diffstat (limited to 'hw')
0 files changed, 0 insertions, 0 deletions