PATCH] slirp: fix buffer overrun
authorBruce Rogers <brogers@novell.com>
Sat, 5 Feb 2011 21:47:56 +0000 (14:47 -0700)
committerAnthony Liguori <aliguori@us.ibm.com>
Mon, 14 Feb 2011 19:23:00 +0000 (13:23 -0600)
commitaa23c40365d8a12c2a30e1eced7a6dd160d87ebd
tree4e5763726615ff65df9eb09978e98eaef0d4f997
parentb2d62e7442448b585ea75e615c63c3a27dbf3d0a
PATCH] slirp: fix buffer overrun

Since the addition of the slirp member to struct mbuf, the value of
SLIRP_MSIZE and the initialization of m_size have not been correct,
resulting in overrunning the end of the malloc'd buffer in some cases.

Signed-off-by: Bruce Rogers <brogers@novell.com>
Signed-off-by: Anthony Liguori <aliguori@us.ibm.com>
slirp/mbuf.c