Re: [Spice-devel] [PATCH spice-common 2/3] Write a small test to test possible crash

2018-05-11 Thread Frediano Ziglio
> > > > On Mon, 2018-03-19 at 10:06 +, Frediano Ziglio wrote: > > > This small test prove a that current generated demarshaller code > > > is not safe to integer overflows leading to buffer overflows. > > > Actually from a quick look at the protocol it seems that client > > > can't cause these

Re: [Spice-devel] [PATCH spice-common 2/3] Write a small test to test possible crash

2018-05-10 Thread Frediano Ziglio
> > On Mon, 2018-03-19 at 10:06 +, Frediano Ziglio wrote: > > This small test prove a that current generated demarshaller code > > is not safe to integer overflows leading to buffer overflows. > > Actually from a quick look at the protocol it seems that client > > can't cause these overflows b

Re: [Spice-devel] [PATCH spice-common 2/3] Write a small test to test possible crash

2018-05-10 Thread Jonathon Jongsma
On Mon, 2018-03-19 at 10:06 +, Frediano Ziglio wrote: > This small test prove a that current generated demarshaller code > is not safe to integer overflows leading to buffer overflows. > Actually from a quick look at the protocol it seems that client > can't cause these overflows but server can

[Spice-devel] [PATCH spice-common 2/3] Write a small test to test possible crash

2018-03-19 Thread Frediano Ziglio
This small test prove a that current generated demarshaller code is not safe to integer overflows leading to buffer overflows. Actually from a quick look at the protocol it seems that client can't cause these overflows but server can quite easily at demonstrated by this test. Signed-off-by: Fredia