3party/mongoose
0
0
Fork 0
mirror of https://github.com/cesanta/mongoose.git synced 2025-01-17 04:51:03 +08:00
Code Issues Projects Releases Wiki Activity

Check for int overflow when parsing WS frames

Browse Source 
PUBLISHED_FROM=b7325b38e881455df703b0b628c41931565ccb33
This commit is contained in:
Deomid Ryabkov 2017-09-06 18:25:27 +01:00 committed by Cesanta Bot
parent f857f6394f
commit c8af7cdd27
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
mongoose.c
View File

@ -9204,7 +9204,13 @@ static int mg_deliver_websocket_data(struct mg_connection *nc) {
} }
frame_len = header_len + data_len; frame_len = header_len + data_len;
ok = frame_len > 0 && frame_len <= buf_len; ok = (frame_len > 0 && frame_len <= buf_len);
/* Check for overflow */
if (frame_len < header_len || frame_len < data_len) {
ok = 0;
nc->flags |= MG_F_CLOSE_IMMEDIATELY;
}
if (ok) { if (ok) {
struct websocket_message wsm; struct websocket_message wsm;