PATCH] slirp: fix buffer overrun
authorBruce Rogers <brogers@novell.com>
Sat, 5 Feb 2011 21:47:56 +0000 (14:47 -0700)
committerAnthony Liguori <aliguori@us.ibm.com>
Mon, 14 Feb 2011 19:23:00 +0000 (13:23 -0600)
commit53fae6d27f342a17bdc218dc51ccccebd99f3545
tree4e5763726615ff65df9eb09978e98eaef0d4f997
parent0fbfbb59a9766247be20023b17eb7872e7b29323
PATCH] slirp: fix buffer overrun

Since the addition of the slirp member to struct mbuf, the value of
SLIRP_MSIZE and the initialization of m_size have not been correct,
resulting in overrunning the end of the malloc'd buffer in some cases.

Signed-off-by: Bruce Rogers <brogers@novell.com>
Signed-off-by: Anthony Liguori <aliguori@us.ibm.com>
slirp/mbuf.c