diff options
| author | Christian Grothoff <christian@grothoff.org> | 2019-06-04 21:05:01 +0200 |
|---|---|---|
| committer | Christian Grothoff <christian@grothoff.org> | 2019-06-04 21:05:10 +0200 |
| commit | 14537ef71b43ac47fe342c4e88f7bd3675ed1e39 (patch) | |
| tree | 6833f549f695ba40533ba716caebc1866415e359 /src/transport/gnunet-service-tng.c | |
| parent | 0e6553e41d132726eb8f7964b581bb2cac0e6b6c (diff) | |
| download | gnunet-14537ef71b43ac47fe342c4e88f7bd3675ed1e39.tar.gz gnunet-14537ef71b43ac47fe342c4e88f7bd3675ed1e39.zip | |
misc bugfixes
Diffstat (limited to 'src/transport/gnunet-service-tng.c')
| -rw-r--r-- | src/transport/gnunet-service-tng.c | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/src/transport/gnunet-service-tng.c b/src/transport/gnunet-service-tng.c index 9262e5e97..206c59363 100644 --- a/src/transport/gnunet-service-tng.c +++ b/src/transport/gnunet-service-tng.c | |||
| @@ -5580,6 +5580,13 @@ handle_fragment_box (void *cls, const struct TransportFragmentBoxMessage *fb) | |||
| 5580 | return; | 5580 | return; |
| 5581 | } | 5581 | } |
| 5582 | frag_off = ntohs (fb->frag_off); | 5582 | frag_off = ntohs (fb->frag_off); |
| 5583 | if (frag_off + fsize > msize) | ||
| 5584 | { | ||
| 5585 | /* Fragment (plus fragment size) exceeds message size! */ | ||
| 5586 | GNUNET_break_op (0); | ||
| 5587 | finish_cmc_handling (cmc); | ||
| 5588 | return; | ||
| 5589 | } | ||
| 5583 | memcpy (&target[frag_off], &fb[1], fsize); | 5590 | memcpy (&target[frag_off], &fb[1], fsize); |
| 5584 | /* update bitfield and msg_missing */ | 5591 | /* update bitfield and msg_missing */ |
| 5585 | for (unsigned int i = frag_off; i < frag_off + fsize; i++) | 5592 | for (unsigned int i = frag_off; i < frag_off + fsize; i++) |