Merge pull request #363 from majestrate/fix_su3_overflow

fix issue #362 , add bounds check to su3 fileNameLength
This commit is contained in:
orignal 2016-02-05 10:03:34 -05:00
commit 0aa3aa1b8d

View File

@ -208,6 +208,11 @@ namespace data
uint16_t fileNameLength, extraFieldLength; uint16_t fileNameLength, extraFieldLength;
s.read ((char *)&fileNameLength, 2); s.read ((char *)&fileNameLength, 2);
fileNameLength = le16toh (fileNameLength); fileNameLength = le16toh (fileNameLength);
if ( fileNameLength > 255 ) {
// too big
LogPrint(eLogError, "Reseed: SU3 fileNameLength too large: ", fileNameLength);
return numFiles;
}
s.read ((char *)&extraFieldLength, 2); s.read ((char *)&extraFieldLength, 2);
extraFieldLength = le16toh (extraFieldLength); extraFieldLength = le16toh (extraFieldLength);
char localFileName[255]; char localFileName[255];