[Qemu-devel] [PULL 65/65] slirp: check data length while emulating ident function

2019-01-14 Thread Samuel Thibault
From: Prasad J Pandit While emulating identification protocol, tcp_emu() does not check available space in the 'sc_rcv->sb_data' buffer. It could lead to heap buffer overflow issue. Add check to avoid it. Reported-by: Kira <864786...@qq.com> Signed-off-by: Prasad J Pandit Signed-off-by: Samuel

[Qemu-devel] [PULL 65/65] slirp: check data length while emulating ident function

2019-01-13 Thread Samuel Thibault
From: Prasad J Pandit While emulating identification protocol, tcp_emu() does not check available space in the 'sc_rcv->sb_data' buffer. It could lead to heap buffer overflow issue. Add check to avoid it. Reported-by: Kira <864786...@qq.com> Signed-off-by: Prasad J Pandit Signed-off-by: Samuel