diff options
author | Schanzenbach, Martin <martin.schanzenbach@aisec.fraunhofer.de> | 2018-06-24 23:01:18 +0200 |
---|---|---|
committer | Schanzenbach, Martin <martin.schanzenbach@aisec.fraunhofer.de> | 2018-06-24 23:01:18 +0200 |
commit | 61985ad211306f415207c044719e6313bc815281 (patch) | |
tree | e8dd51a5b199df49d067ddf05cf8aa8ce3883809 /src | |
parent | 09bdc89cb609c0b320b0132da3788e14a11685c8 (diff) | |
download | gnunet-61985ad211306f415207c044719e6313bc815281.tar.gz gnunet-61985ad211306f415207c044719e6313bc815281.zip |
fix possible buffer overrun
Diffstat (limited to 'src')
-rw-r--r-- | src/namecache/namecache_api.c | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/src/namecache/namecache_api.c b/src/namecache/namecache_api.c index 2bb233da1..6e4ebeae0 100644 --- a/src/namecache/namecache_api.c +++ b/src/namecache/namecache_api.c | |||
@@ -224,6 +224,12 @@ handle_lookup_block_response (void *cls, | |||
224 | GNUNET_free (qe); | 224 | GNUNET_free (qe); |
225 | return; | 225 | return; |
226 | } | 226 | } |
227 | if (ntohs (msg->gns_header.header.size) < sizeof (struct LookupBlockResponseMessage)) | ||
228 | { | ||
229 | LOG (GNUNET_ERROR_TYPE_ERROR, | ||
230 | "Message is too short\n"); | ||
231 | return; | ||
232 | } | ||
227 | size = ntohs (msg->gns_header.header.size) | 233 | size = ntohs (msg->gns_header.header.size) |
228 | - sizeof (struct LookupBlockResponseMessage); | 234 | - sizeof (struct LookupBlockResponseMessage); |
229 | { | 235 | { |