diff options
| author | Philippe Mathieu-Daudé <philmd@redhat.com> | 2023-08-24 17:47:06 +0100 |
|---|---|---|
| committer | Eric Blake <eblake@redhat.com> | 2023-09-07 20:32:11 -0500 |
| commit | 522a9b94e0f8a1f89f1660a46121ab0d0eae3593 (patch) | |
| tree | e201cce3f8b3c6637e9bc6f7795151dd94b01cb3 /qga/commands-posix-ssh.c | |
| parent | 06e0f098d612df79597de58121dadf6f5f375d04 (diff) | |
| download | focaccia-qemu-522a9b94e0f8a1f89f1660a46121ab0d0eae3593.tar.gz focaccia-qemu-522a9b94e0f8a1f89f1660a46121ab0d0eae3593.zip | |
util/iov: Avoid dynamic stack allocation
Use autofree heap allocation instead of variable-length array on the stack. The codebase has very few VLAs, and if we can get rid of them all we can make the compiler error on new additions. This is a defensive measure against security bugs where an on-stack dynamic allocation isn't correctly size-checked (e.g. CVE-2021-3527). Signed-off-by: Philippe Mathieu-Daudé <philmd@redhat.com> Signed-off-by: Peter Maydell <peter.maydell@linaro.org> Message-ID: <20230824164706.2652277-1-peter.maydell@linaro.org> Reviewed-by: Eric Blake <eblake@redhat.com> Signed-off-by: Eric Blake <eblake@redhat.com>
Diffstat (limited to 'qga/commands-posix-ssh.c')
0 files changed, 0 insertions, 0 deletions