diff options
| author | Akihiko Odaki <akihiko.odaki@daynix.com> | 2023-02-23 19:20:10 +0900 |
|---|---|---|
| committer | Jason Wang <jasowang@redhat.com> | 2023-03-10 15:35:38 +0800 |
| commit | dd32b5ea7eeea367058ec8e0f9eb41de41a8d106 (patch) | |
| tree | df137bc8ef1777e1294e32456c0d37de2c98424f /hw/display | |
| parent | 02ef5fdc092bd495d6afd3c0212ff2e45931886d (diff) | |
| download | qemu-dd32b5ea7eeea367058ec8e0f9eb41de41a8d106.zip qemu-dd32b5ea7eeea367058ec8e0f9eb41de41a8d106.tar.gz qemu-dd32b5ea7eeea367058ec8e0f9eb41de41a8d106.tar.bz2 | |
hw/net/net_tx_pkt: Check the payload length
Check the payload length if checksumming to ensure the payload contains
the space for the resulting value.
This bug was found by Alexander Bulekov with the fuzzer:
https://patchew.org/QEMU/20230129053316.1071513-1-alxndr@bu.edu/
The fixed test case is:
fuzz/crash_6aeaa33e7211ecd603726c53e834df4c6d1e08bc
Fixes: e263cd49c7 ("Packet abstraction for VMWARE network devices")
Signed-off-by: Akihiko Odaki <akihiko.odaki@daynix.com>
Signed-off-by: Jason Wang <jasowang@redhat.com>
Diffstat (limited to 'hw/display')
0 files changed, 0 insertions, 0 deletions