mirror of
https://github.com/PurpleI2P/i2pd.git
synced 2024-11-17 21:26:04 +00:00
Merge pull request #363 from majestrate/fix_su3_overflow
fix issue #362 , add bounds check to su3 fileNameLength
This commit is contained in:
commit
0aa3aa1b8d
@ -208,6 +208,11 @@ namespace data
|
|||||||
uint16_t fileNameLength, extraFieldLength;
|
uint16_t fileNameLength, extraFieldLength;
|
||||||
s.read ((char *)&fileNameLength, 2);
|
s.read ((char *)&fileNameLength, 2);
|
||||||
fileNameLength = le16toh (fileNameLength);
|
fileNameLength = le16toh (fileNameLength);
|
||||||
|
if ( fileNameLength > 255 ) {
|
||||||
|
// too big
|
||||||
|
LogPrint(eLogError, "Reseed: SU3 fileNameLength too large: ", fileNameLength);
|
||||||
|
return numFiles;
|
||||||
|
}
|
||||||
s.read ((char *)&extraFieldLength, 2);
|
s.read ((char *)&extraFieldLength, 2);
|
||||||
extraFieldLength = le16toh (extraFieldLength);
|
extraFieldLength = le16toh (extraFieldLength);
|
||||||
char localFileName[255];
|
char localFileName[255];
|
||||||
|
Loading…
Reference in New Issue
Block a user