lan9118 bug peeked received message size not equal to actual received message size
Bug #1904954 reported by
alfred gedeon
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
QEMU |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
peeked message size is not equal to read message size
Bug in the code at line:
https:/
s->tx_status_
Could also be a security bug, as the user could allocate a buffer of size peeked data smaller than the actual packet received, which could cause a buffer overflow.
Thanks,
Alfred
description: | updated |
description: | updated |
description: | updated |
summary: |
- lan9118 bug peeking receive massage size not equal to received message - size + lan9118 bug peeked received message size not equal to actual received + message size |
Changed in qemu: | |
status: | New → In Progress |
tags: |
added: networking removed: netwroking |
Changed in qemu: | |
status: | Fix Committed → Fix Released |
To post a comment you must log in.
Do you have a test case that will reproduce this bug ?