diff options
| author | Peter Maydell <peter.maydell@linaro.org> | 2023-08-24 16:32:24 +0100 |
|---|---|---|
| committer | Jason Wang <jasowang@redhat.com> | 2023-09-18 14:36:13 +0800 |
| commit | 6d7a53e9f16d2b18d94f9fce1e4eea34570286ef (patch) | |
| tree | bc8483a07380895abefba7d9f928bfe2caef8f08 /scripts/u2f-setup-gen.py | |
| parent | c4cf68198ea6081de64265a1e1c2620576a209a0 (diff) | |
| download | qemu-6d7a53e9f16d2b18d94f9fce1e4eea34570286ef.zip qemu-6d7a53e9f16d2b18d94f9fce1e4eea34570286ef.tar.gz qemu-6d7a53e9f16d2b18d94f9fce1e4eea34570286ef.tar.bz2 | |
net/tap: Avoid variable-length array
Use a heap allocation instead of a variable length array in
tap_receive_iov().
The codebase has very few VLAs, and if we can get rid of them all we
can make the compiler error on new additions. This is a defensive
measure against security bugs where an on-stack dynamic allocation
isn't correctly size-checked (e.g. CVE-2021-3527).
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
Reviewed-by: Francisco Iglesias <frasse.iglesias@gmail.com>
Signed-off-by: Jason Wang <jasowang@redhat.com>
Diffstat (limited to 'scripts/u2f-setup-gen.py')
0 files changed, 0 insertions, 0 deletions