[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Qemu-devel] [PATCH 1/2] slirp: correct size computation while conca
|
From: |
P J P |
|
Subject: |
Re: [Qemu-devel] [PATCH 1/2] slirp: correct size computation while concatenating mbuf |
|
Date: |
Thu, 7 Jun 2018 00:12:51 +0530 (IST) |
Hello Samuel,
+-- On Wed, 6 Jun 2018, Samuel Thibault wrote --+
| > From: Prasad J Pandit <address@hidden>
| >
| > While reassembling incoming fragmented datagrams, 'm_cat' routine
| > extends the 'mbuf' buffer, if it has insufficient room. It computes
| > a wrong buffer size, which leads to overwriting adjacent heap buffer
| > area. Correct this size computation in m_cat.
| >
| > Reported-by: ZDI Disclosures <address@hidden>
| > Signed-off-by: Prasad J Pandit <address@hidden>
|
| Applied to my tree with a couple documentation improvements, thanks!
-> https://lists.gnu.org/archive/html/qemu-devel/2018-06/msg01144.html
This is patch v1 with indentation fix flagged by checkpatch.pl. In case you
prefer this one.
Thank you.
--
- P J P
47AF CE69 3A90 54AA 9045 1053 DD13 3D32 FE5B 041F