exchange

commit 01621e943466a3a938276918c8e9a63811e39a3a
parent fe8f1fbcff6ac104360b67fdb66e64c45c4208ce
Author: Christian Grothoff <christian@grothoff.org>
Date:   Thu, 13 Aug 2026 20:34:46 +0200

fix out-of-bounds read if prewire data is corrupt

Diffstat:
M
src/bank-lib/bank_api_transfer.c
 | 
4
+++-

1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/src/bank-lib/bank_api_transfer.c b/src/bank-lib/bank_api_transfer.c
@@ -269,7 +269,9 @@ TALER_BANK_transfer (
   }
   d_len = ntohl (wp->account_len);
   u_len = ntohl (wp->exchange_url_len);
-  if ( (sizeof (*wp) + d_len + u_len > buf_size) ||
+  if ( (0 == d_len) ||
+       (0 == u_len) ||
+       (sizeof (*wp) + d_len + u_len > buf_size) ||
        (d_len > buf_size) ||
        (u_len > buf_size) ||
        (d_len + u_len > buf_size) )