a7104eda7d
While emulating identification protocol, tcp_emu() does not check available space in the 'sc_rcv->sb_data' buffer. It could lead to heap buffer overflow issue. Add check to avoid it. Reported-by: Kira <864786842@qq.com> Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org> Signed-off-by: Samuel Thibault <samuel.thibault@ens-lyon.org> |
||
---|---|---|
.. | ||
arp_table.c | ||
bootp.c | ||
bootp.h | ||
cksum.c | ||
COPYRIGHT | ||
debug.h | ||
dhcpv6.c | ||
dhcpv6.h | ||
dnssearch.c | ||
if.c | ||
if.h | ||
ip6_icmp.c | ||
ip6_icmp.h | ||
ip6_input.c | ||
ip6_output.c | ||
ip6.h | ||
ip_icmp.c | ||
ip_icmp.h | ||
ip_input.c | ||
ip_output.c | ||
ip.h | ||
libslirp.h | ||
main.h | ||
Makefile.objs | ||
mbuf.c | ||
mbuf.h | ||
misc.c | ||
misc.h | ||
ncsi-pkt.h | ||
ncsi.c | ||
ndp_table.c | ||
sbuf.c | ||
sbuf.h | ||
slirp.c | ||
slirp.h | ||
socket.c | ||
socket.h | ||
tcp_input.c | ||
tcp_output.c | ||
tcp_subr.c | ||
tcp_timer.c | ||
tcp_timer.h | ||
tcp_var.h | ||
tcp.h | ||
tcpip.h | ||
tftp.c | ||
tftp.h | ||
trace-events | ||
udp6.c | ||
udp.c | ||
udp.h |