From 70422d06a9d94eb79532d2ca5f993fb3e0fc0404 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=A9r=C3=B4me=20Duval?= <jerome.duval@gmail.com>
Date: Sat, 7 Apr 2018 11:54:10 +0200
Subject: [PATCH] ipv6: avoid unbounded stack usage in send_fragments().

---
 src/add-ons/kernel/network/protocols/ipv6/ipv6.cpp | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/add-ons/kernel/network/protocols/ipv6/ipv6.cpp b/src/add-ons/kernel/network/protocols/ipv6/ipv6.cpp
index 37964ac598..0e07ef0180 100644
--- a/src/add-ons/kernel/network/protocols/ipv6/ipv6.cpp
+++ b/src/add-ons/kernel/network/protocols/ipv6/ipv6.cpp
@@ -22,6 +22,7 @@
 
 #include <ByteOrder.h>
 #include <KernelExport.h>
+#include <StackOrHeapArray.h>
 #include <util/AutoLock.h>
 #include <util/list.h>
 #include <util/DoublyLinkedList.h>
@@ -636,7 +637,7 @@ send_fragments(ipv6_protocol* protocol, struct net_route* route,
 	if (status != B_OK)
 		return status;
 
-	uint8 data[bytesLeft];
+	BStackOrHeapArray<uint8, 128> data(bytesLeft);
 	status = gBufferModule->read(buffer, headersLength, data, bytesLeft);
 	if (status != B_OK)
 		return status;