[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Qemu-devel] [PATCH 1/2] slirp: correct size computation while conca
|
From: |
Samuel Thibault |
|
Subject: |
Re: [Qemu-devel] [PATCH 1/2] slirp: correct size computation while concatenating mbuf |
|
Date: |
Wed, 6 Jun 2018 11:09:57 +0200 |
|
User-agent: |
NeoMutt/20170113 (1.7.2) |
Hello,
P J P, le mar. 05 juin 2018 23:38:35 +0530, a ecrit:
> From: Prasad J Pandit <address@hidden>
>
> While reassembling incoming fragmented datagrams, 'm_cat' routine
> extends the 'mbuf' buffer, if it has insufficient room. It computes
> a wrong buffer size, which leads to overwriting adjacent heap buffer
> area. Correct this size computation in m_cat.
>
> Reported-by: ZDI Disclosures <address@hidden>
> Signed-off-by: Prasad J Pandit <address@hidden>
Applied to my tree with a couple documentation improvements, thanks!
Samuel