On 26.03.2014 13:05, Stefan Hajnoczi wrote:
From: Fam Zheng <f...@redhat.com>
curl_read_cb is callback function for libcurl when data arrives. The
data size passed in here is not guaranteed to be within the range of
request we submitted, so we may overflow the guest IO buffer. Check the
real size we have before memcpy to buffer to avoid overflow.
Signed-off-by: Fam Zheng <f...@redhat.com>
Reviewed-by: Stefan Hajnoczi <stefa...@redhat.com>
Signed-off-by: Kevin Wolf <kw...@redhat.com>
---
block/curl.c | 5 +++++
1 file changed, 5 insertions(+)
Reviewed-by: Max Reitz <mre...@redhat.com>
