Prasad J Pandit a7104eda7d slirp: check data length while emulating ident function ...

While emulating identification protocol, tcp_emu() does not check
available space in the 'sc_rcv->sb_data' buffer. It could lead to
heap buffer overflow issue. Add check to avoid it.

Reported-by: Kira <864786842@qq.com>
Signed-off-by: Prasad J Pandit <pjp@fedoraproject.org>
Signed-off-by: Samuel Thibault <samuel.thibault@ens-lyon.org>

2019-01-14 23:36:38 +01:00

..

arp_table.c

slirp: replace DEBUG_ARGS with DEBUG_ARG

2019-01-14 00:44:29 +01:00

bootp.c

slirp: no need to make DPRINTF conditional on DEBUG

2019-01-14 00:44:29 +01:00

bootp.h

…

cksum.c

slirp: call into g_debug() for DEBUG macros

2019-01-14 23:36:38 +01:00

COPYRIGHT

…

debug.h

slirp: Mark debugging calls as unlikely

2019-01-14 23:36:38 +01:00

dhcpv6.c

slirp: call into g_debug() for DEBUG macros

2019-01-14 23:36:38 +01:00

dhcpv6.h

…

dnssearch.c

…

if.c

slirp: add clock_get_ns() callback

2019-01-14 00:44:29 +01:00

if.h

…

ip6_icmp.c

slirp: add clock_get_ns() callback

2019-01-14 00:44:29 +01:00

ip6_icmp.h

…

ip6_input.c

slirp: use %p for pointers format

2019-01-14 00:44:29 +01:00

ip6_output.c

slirp: use %p for pointers format

2019-01-14 00:44:29 +01:00

ip6.h

…

ip_icmp.c

slirp: call into g_debug() for DEBUG macros

2019-01-14 23:36:38 +01:00

ip_icmp.h

…

ip_input.c

…

ip_output.c

…

ip.h

…

libslirp.h

slirp: add clock_get_ns() callback

2019-01-14 00:44:29 +01:00

main.h

…

Makefile.objs

slirp: set G_LOG_DOMAIN

2019-01-14 23:36:38 +01:00

mbuf.c

…

mbuf.h

…

misc.c

slirp: factor out guestfwd addition checks

2019-01-14 00:44:29 +01:00

misc.h

slirp: rename exec_list

2019-01-14 00:44:29 +01:00

ncsi-pkt.h

…

ncsi.c

…

ndp_table.c

slirp: replace DEBUG_ARGS with DEBUG_ARG

2019-01-14 00:44:29 +01:00

sbuf.c

…

sbuf.h

…

slirp.c

slirp: call into g_debug() for DEBUG macros

2019-01-14 23:36:38 +01:00

slirp.h

slirp: rename exec_list

2019-01-14 00:44:29 +01:00

socket.c

slirp: call into g_debug() for DEBUG macros

2019-01-14 23:36:38 +01:00

socket.h

…

tcp_input.c

slirp: call into g_debug() for DEBUG macros

2019-01-14 23:36:38 +01:00

tcp_output.c

slirp: call into g_debug() for DEBUG macros

2019-01-14 23:36:38 +01:00

tcp_subr.c

slirp: check data length while emulating ident function

2019-01-14 23:36:38 +01:00

tcp_timer.c

…

tcp_timer.h

…

tcp_var.h

…

tcp.h

…

tcpip.h

…

tftp.c

…

tftp.h

…

trace-events

…

udp6.c

slirp: call into g_debug() for DEBUG macros

2019-01-14 23:36:38 +01:00

udp.c

slirp: call into g_debug() for DEBUG macros

2019-01-14 23:36:38 +01:00

udp.h

…