diff options
| author | Michael Roth <mdroth@linux.vnet.ibm.com> | 2019-09-24 10:35:09 -0500 |
|---|---|---|
| committer | Michael Roth <mdroth@linux.vnet.ibm.com> | 2019-10-01 17:00:56 -0500 |
| commit | 28c1dde9aa2a22724f81134035959d1a33a57690 (patch) | |
| tree | 3fc5272410cfa0da36cf225993bad535d549977b /include/hw/virtio/virtio-input.h | |
| parent | ab630a065a3344c84ec1b280696800fd62afda03 (diff) | |
slirp: Fix heap overflow in ip_reass on big packet input
When the first fragment does not fit in the preallocated buffer, q will
already be pointing to the ext buffer, so we mustn't try to update it.
Signed-off-by: Samuel Thibault <samuel.thibault@ens-lyon.org>
(from libslirp.git commit 126c04acbabd7ad32c2b018fe10dfac2a3bc1210)
(from libslirp.git commit e0be80430c390bce181ea04dfcdd6ea3dfa97de1)
*squash in e0be80 (clarifying comments)
Signed-off-by: Michael Roth <mdroth@linux.vnet.ibm.com>
Diffstat (limited to 'include/hw/virtio/virtio-input.h')
0 files changed, 0 insertions, 0 deletions