aboutsummaryrefslogtreecommitdiff
path: root/test/py
diff options
context:
space:
mode:
authorJohn Levon <john.levon@nutanix.com>2024-08-19 11:44:36 +0100
committerGitHub <noreply@github.com>2024-08-19 11:44:36 +0100
commitb1a156d86f55a8fa3f78ece5bee7748ec75e7b82 (patch)
treed42e16fc3fb1ef6a1a0cabf1a48a823904ff3e3f /test/py
parent3f1500b384cd5aca13b517ebd4055727f35dc14f (diff)
downloadlibvfio-user-master.zip
libvfio-user-master.tar.gz
libvfio-user-master.tar.bz2
Add further sanity checking of hdr->error_no (#805)HEADmaster
>>> CID 467267: Insecure data handling (INTEGER_OVERFLOW) >>> The cast of "hdr->error_no" to a signed type could result in a negative number. Indeed, if a client sends a very large ->error_no, this could end up with a negative errno value. This doesn't seem like an issue, but nonetheless tighten up our validation. For some reason Coverity only complained about tran_pipe.c, but the same problem exists in tran_sock.c. Signed-off-by: John Levon <john.levon@nutanix.com>
Diffstat (limited to 'test/py')
0 files changed, 0 insertions, 0 deletions