Re: [Qemu-devel] [PATCH] slirp: check sscanf result when emulating ident

2019-03-02 Thread William Bowling
y guess). Yeah the report and patch went via the security list initially due to the info leak. Cheers, Will On Sun, Mar 3, 2019 at 4:42 AM Philippe Mathieu-Daudé wrote: > Hi William, Samuel, > > On 3/1/19 10:45 PM, William Bowling wrote: > > When emulating ident in tcp_emu, if t

[Qemu-devel] [PATCH] slirp: check sscanf result when emulating ident

2019-03-01 Thread William Bowling
When emulating ident in tcp_emu, if the strchr checks passed but the sscanf check failed, two uninitialized variables would be copied and sent in the reply. Signed-off-by: William Bowling --- slirp/tcp_subr.c | 12 ++-- 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/slirp