arti/wrapsix
1
0
Fork 0
mirror of https://code.semirocket.science/wrapsix synced 2024-11-22 09:29:22 +02:00
Code

Incorrect computing of packet size caused SIGSEGV

Browse Source
This commit is contained in:
Michal Zima 2012-04-27 14:43:09 +02:00
parent b28566bc64
commit 7012d02ab4
1 changed files with 2 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
src/tcp.c
View File

@ -219,7 +219,6 @@ int tcp_ipv6(struct s_ethernet *eth6, struct s_ipv6 *ip6, char *payload)
unsigned short orig_checksum; unsigned short orig_checksum;
struct s_ipv4 *ip4; struct s_ipv4 *ip4;
unsigned char *packet; unsigned char *packet;
unsigned int packet_size;
/* parse TCP header */ /* parse TCP header */
tcp = (struct s_tcp *) payload; tcp = (struct s_tcp *) payload;
@ -249,8 +248,8 @@ int tcp_ipv6(struct s_ethernet *eth6, struct s_ipv6 *ip6, char *payload)
} }
/* allocate memory for translated packet */ /* allocate memory for translated packet */
packet_size = sizeof(struct s_ipv4) + ip6->len; if ((packet = (unsigned char *) malloc(sizeof(struct s_ipv4) +
if ((packet = (unsigned char *) malloc(packet_size)) == NULL) { htons(ip6->len))) == NULL) {
fprintf(stderr, "[Error] Lack of free memory\n"); fprintf(stderr, "[Error] Lack of free memory\n");
return 1; return 1;
} }