Liblor / advanced_operating_systems_2020

Advanced Operating System Course at ETHZ
MIT License
19 stars 3 forks source link

allocate proper size of new message to prevent heap data overwrite #76

Closed abertschi closed 4 years ago

abertschi commented 4 years ago

fixes #75 heap overflow due to wrong message size. allocated was only full_msg_size(*header) which did not include a capref as defined in (struct rpc_message) Succeeding mallocs caused data overwrite

leopoldsedev commented 4 years ago

Good find, looks right, thank you.