• E
    uml: sanity check external data before using it · 582c75ec
    Eric Blake 提交于
    Otherwise, a malicious packet could cause a DoS via spurious
    out-of-memory failure.
    
    * src/uml/uml_driver.c (umlMonitorCommand): Validate that incoming
    data is reliable before using it to allocate/dereference memory.
    Don't report bogus errno on short read.
    Reported by Jim Meyering.
    582c75ec
uml_driver.c 52.1 KB