aurel32 e8e880a72e slirp: fix CVE 2007-5729 ...

The emulated network cards in QEMU allows local users to execute arbitrary
code by writing Ethernet frames with a size larger than the slirp's default
MTU, which triggers a heap-based buffer overflow in the slirp library.

Signed-off-by: Aurelien Jarno <aurelien@aurel32.net>

git-svn-id: svn://svn.savannah.nongnu.org/qemu/trunk@5920 c046a42c-6fe2-441c-8c8c-71466251a162

2008-12-07 18:15:23 +00:00

..

bootp.c

Make some variables static

2008-10-01 19:06:48 +00:00

bootp.h

…

cksum.c

…

COPYRIGHT

…

ctl.h

…

debug.c

…

debug.h

…

icmp_var.h

…

if.c

…

if.h

…

ip_icmp.c

Make some variables static

2008-10-01 19:06:48 +00:00

ip_icmp.h

…

ip_input.c

…

ip_output.c

…

ip.h

…

libslirp.h

…

main.h

…

mbuf.c

Remove unused variables

2008-10-01 18:08:41 +00:00

mbuf.h

…

misc.c

…

misc.h

Fix inline use warnings from sparse

2008-10-26 15:26:09 +00:00

sbuf.c

…

sbuf.h

…

slirp_config.h

…

slirp.c

slirp: fix CVE 2007-5729

2008-12-07 18:15:23 +00:00

slirp.h

Fix inline use warnings from sparse

2008-10-26 15:26:09 +00:00

socket.c

Make struct iovec universally available

2008-12-05 20:05:26 +00:00

socket.h

Make struct iovec universally available

2008-12-05 20:05:26 +00:00

tcp_input.c

…

tcp_output.c

…

tcp_subr.c

…

tcp_timer.c

…

tcp_timer.h

…

tcp_var.h

…

tcp.h

…

tcpip.h

…

tftp.c

…

tftp.h

…

udp.c

Replace uses of strncpy (a GNU extension) with Qemu pstrcpy

2008-10-25 11:21:28 +00:00

udp.h

…