qemu/slirp
Prasad J Pandit a7104eda7d slirp: check data length while emulating ident function
While emulating identification protocol, tcp_emu() does not check
available space in the 'sc_rcv->sb_data' buffer. It could lead to
heap buffer overflow issue. Add check to avoid it.

Reported-by: Kira <864786842@qq.com>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Signed-off-by: Samuel Thibault <samuel.thibault@ens-lyon.org>
2019-01-14 23:36:38 +01:00
..
arp_table.c
bootp.c
bootp.h
cksum.c
COPYRIGHT
debug.h slirp: Mark debugging calls as unlikely 2019-01-14 23:36:38 +01:00
dhcpv6.c
dhcpv6.h
dnssearch.c
if.c
if.h
ip6_icmp.c
ip6_icmp.h
ip6_input.c
ip6_output.c
ip6.h
ip_icmp.c
ip_icmp.h
ip_input.c
ip_output.c
ip.h
libslirp.h
main.h
Makefile.objs
mbuf.c
mbuf.h
misc.c
misc.h
ncsi-pkt.h
ncsi.c
ndp_table.c
sbuf.c
sbuf.h
slirp.c
slirp.h
socket.c
socket.h
tcp_input.c
tcp_output.c
tcp_subr.c slirp: check data length while emulating ident function 2019-01-14 23:36:38 +01:00
tcp_timer.c
tcp_timer.h
tcp_var.h
tcp.h
tcpip.h
tftp.c
tftp.h
trace-events
udp6.c
udp.c
udp.h