]> git.ipfire.org Git - thirdparty/qemu.git/commit
PATCH] slirp: fix buffer overrun
authorBruce Rogers <brogers@novell.com>
Sat, 5 Feb 2011 21:47:56 +0000 (14:47 -0700)
committerJustin M. Forbes <jforbes@redhat.com>
Mon, 14 Feb 2011 20:19:12 +0000 (14:19 -0600)
commitbd2483faf127abe9fa5abc3c8e199f5e7d6534d3
tree7227d739f5245df81f7f3173ca171c04205f9086
parent7083b66b45571c610cc0a9dedff761da8ebe013f
PATCH] slirp: fix buffer overrun

Since the addition of the slirp member to struct mbuf, the value of
SLIRP_MSIZE and the initialization of m_size have not been correct,
resulting in overrunning the end of the malloc'd buffer in some cases.

Signed-off-by: Bruce Rogers <brogers@novell.com>
Signed-off-by: Anthony Liguori <aliguori@us.ibm.com>
slirp/mbuf.c