aboutsummaryrefslogtreecommitdiff
path: root/src
diff options
context:
space:
mode:
authorSchanzenbach, Martin <martin.schanzenbach@aisec.fraunhofer.de>2018-06-24 23:01:18 +0200
committerSchanzenbach, Martin <martin.schanzenbach@aisec.fraunhofer.de>2018-06-24 23:01:18 +0200
commit61985ad211306f415207c044719e6313bc815281 (patch)
treee8dd51a5b199df49d067ddf05cf8aa8ce3883809 /src
parent09bdc89cb609c0b320b0132da3788e14a11685c8 (diff)
downloadgnunet-61985ad211306f415207c044719e6313bc815281.tar.gz
gnunet-61985ad211306f415207c044719e6313bc815281.zip
fix possible buffer overrun
Diffstat (limited to 'src')
-rw-r--r--src/namecache/namecache_api.c6
1 files changed, 6 insertions, 0 deletions
diff --git a/src/namecache/namecache_api.c b/src/namecache/namecache_api.c
index 2bb233da1..6e4ebeae0 100644
--- a/src/namecache/namecache_api.c
+++ b/src/namecache/namecache_api.c
@@ -224,6 +224,12 @@ handle_lookup_block_response (void *cls,
224 GNUNET_free (qe); 224 GNUNET_free (qe);
225 return; 225 return;
226 } 226 }
227 if (ntohs (msg->gns_header.header.size) < sizeof (struct LookupBlockResponseMessage))
228 {
229 LOG (GNUNET_ERROR_TYPE_ERROR,
230 "Message is too short\n");
231 return;
232 }
227 size = ntohs (msg->gns_header.header.size) 233 size = ntohs (msg->gns_header.header.size)
228 - sizeof (struct LookupBlockResponseMessage); 234 - sizeof (struct LookupBlockResponseMessage);
229 { 235 {