mirrors/qemu
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

qemu-sockets: Fix buffer overflow in inet_parse()

Browse Source 
The size of the stack allocated host[] array didn't account for the
terminating '\0' byte that sscanf() writes. Fix the array size.

Signed-off-by: Kevin Wolf <kwolf@redhat.com>
Reviewed-by: John Snow <jsnow@redhat.com>
Signed-off-by: Michael Tokarev <mjt@tls.msk.ru>
This commit is contained in:
Kevin Wolf 2015-01-30 20:37:55 +01:00 committed by Michael Tokarev
parent 02f292d905
commit 55a1099603
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
util/qemu-sockets.c
View File

@ -512,7 +512,7 @@ InetSocketAddress *inet_parse(const char *str, Error **errp)
{ {
InetSocketAddress *addr; InetSocketAddress *addr;
const char *optstr, *h; const char *optstr, *h;
char host[64]; char host[65];
char port[33]; char port[33];
int to; int to;
int pos; int pos;