3party/mongoose
0
0
Fork 0
mirror of https://github.com/cesanta/mongoose.git synced 2025-01-15 10:18:11 +08:00
Code Issues Projects Releases Wiki Activity

Add integer overflow protection

Browse Source
This commit is contained in:
cpq 2023-08-18 20:33:57 +01:00
parent 69d2ba7316
commit f3617a1cf3
2 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
mongoose.c
View File

@ -1533,6 +1533,7 @@ int mg_http_parse(const char *s, size_t len, struct mg_http_message *hm) {
hm->body.len = 0; hm->body.len = 0;
hm->message.len = (size_t) req_len; hm->message.len = (size_t) req_len;
} }
if (hm->message.len < (size_t) req_len) return -1; // Overflow protection
return req_len; return req_len;
} }

1
src/http.c
View File

@ -301,6 +301,7 @@ int mg_http_parse(const char *s, size_t len, struct mg_http_message *hm) {
hm->body.len = 0; hm->body.len = 0;
hm->message.len = (size_t) req_len; hm->message.len = (size_t) req_len;
} }
if (hm->message.len < (size_t) req_len) return -1; // Overflow protection
return req_len; return req_len;
} }