virtfs-proxy-helper: fix call to accept
authorTim Comer <comer0@gmail.com>
Sat, 19 Apr 2014 17:39:57 +0000 (13:39 -0400)
committerMichael Tokarev <mjt@tls.msk.ru>
Mon, 28 Apr 2014 04:55:32 +0000 (08:55 +0400)
The current code calls accept() without initializing the size parameter
which means the accept call might write too much to the stack.

URL: https://bugs.gentoo.org/486714
Signed-off-by: Tim Comer <comer0@gmail.com>
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
Reviewed-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Michael Tokarev <mjt@tls.msk.ru>
fsdev/virtfs-proxy-helper.c

index bfecb87..cd291d3 100644 (file)
@@ -760,6 +760,7 @@ static int proxy_socket(const char *path, uid_t uid, gid_t gid)
         return -1;
     }
 
+    size = sizeof(qemu);
     client = accept(sock, (struct sockaddr *)&qemu, &size);
     if (client < 0) {
         do_perror("accept");