vde2/vde2-buffer-overflow.patch

14 lines
566 B
Diff

Index: vde2-2.3.2+svn587/src/vde_router/vder_packet.c
===================================================================
--- vde2-2.3.2+svn587.orig/src/vde_router/vder_packet.c
+++ vde2-2.3.2+svn587/src/vde_router/vder_packet.c
@@ -199,7 +199,7 @@ void vder_packet_recv(struct vder_iface
} else {
struct iphdr *hdr = iphead(packet);
uint32_t sender = hdr->saddr;
- uint8_t foot[sizeof(hdr) + 8];
+ uint8_t foot[sizeof(struct iphdr) + 8];
memcpy(foot, footprint(packet), sizeof(struct iphdr) + 8);
if (vder_ip_decrease_ttl(packet)) {