diff options
| author | Bruce Rogers <brogers@novell.com> | 2011-02-05 14:47:56 -0700 |
|---|---|---|
| committer | Anthony Liguori <aliguori@us.ibm.com> | 2011-02-14 13:23:00 -0600 |
| commit | 53fae6d27f342a17bdc218dc51ccccebd99f3545 (patch) | |
| tree | 4e5763726615ff65df9eb09978e98eaef0d4f997 /slirp/ip_icmp.c | |
| parent | 0fbfbb59a9766247be20023b17eb7872e7b29323 (diff) | |
| download | qemu-53fae6d27f342a17bdc218dc51ccccebd99f3545.tar.gz | |
PATCH] slirp: fix buffer overrun
Since the addition of the slirp member to struct mbuf, the value of
SLIRP_MSIZE and the initialization of m_size have not been correct,
resulting in overrunning the end of the malloc'd buffer in some cases.
Signed-off-by: Bruce Rogers <brogers@novell.com>
Signed-off-by: Anthony Liguori <aliguori@us.ibm.com>
Diffstat (limited to 'slirp/ip_icmp.c')
0 files changed, 0 insertions, 0 deletions