Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
SUSE:SLE-15-SP1:Update
qemu-linux-user
0220-libslirp-bootp-check-bootp_input-bu.patch
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File 0220-libslirp-bootp-check-bootp_input-bu.patch of Package qemu-linux-user
From: Jose R Ziviani <jose.ziviani@suse.com> Date: Tue, 6 Jul 2021 17:13:28 -0600 Subject: libslirp: bootp: check bootp_input buffer size MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Git-commit: 2eca0838eee1da96204545e22cdaed860d9d7c6c References: bsc#1187364, CVE-2021-3592 Fixes: CVE-2021-3592 Fixes: https://gitlab.freedesktop.org/slirp/libslirp/-/issues/44 Signed-off-by: Marc-André Lureau <marcandre.lureau@redhat.com> Signed-off-by: Jose R Ziviani <jose.ziviani@suse.com> --- slirp/bootp.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/slirp/bootp.c b/slirp/bootp.c index 27f9e702f5b40fd611f7396a7d85..a9471b2793b926c97941fb915942 100644 --- a/slirp/bootp.c +++ b/slirp/bootp.c @@ -370,9 +370,9 @@ static void bootp_reply(Slirp *slirp, void bootp_input(struct mbuf *m) { - struct bootp_t *bp = mtod(m, struct bootp_t *); + struct bootp_t *bp = mtod_check(m, sizeof(struct bootp_t)); - if (bp->bp_op == BOOTP_REQUEST) { + if (bp && bp->bp_op == BOOTP_REQUEST) { bootp_reply(m->slirp, bp, m_end(m)); } }
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor