Mercurial > pidgin.yaz
changeset 31769:eeca86db288b
Oops, I forgot to move the size check to the new location.
| author | Elliott Sales de Andrade <qulogic@pidgin.im> |
|---|---|
| date | Thu, 10 Mar 2011 05:07:48 +0000 |
| parents | 8cf9270acf4c |
| children | 40eb10487f87 |
| files | libpurple/protocols/msn/p2p.c |
| diffstat | 1 files changed, 7 insertions(+), 1 deletions(-) [+] |
line wrap: on
line diff
--- a/libpurple/protocols/msn/p2p.c Thu Mar 10 05:00:17 2011 +0000 +++ b/libpurple/protocols/msn/p2p.c Thu Mar 10 05:07:48 2011 +0000 @@ -90,12 +90,18 @@ size_t msn_p2p_header_from_wire(MsnP2PInfo *info, const char *wire, size_t max_len) { - size_t len; + size_t len = 0; switch (info->version) { case MSN_P2P_VERSION_ONE: { MsnP2PHeader *header = &info->header.v1; + if (max_len < P2P_PACKET_HEADER_SIZE) { + /* Invalid packet length */ + len = 0; + break; + } + header->session_id = msn_pop32le(wire); header->id = msn_pop32le(wire); header->offset = msn_pop64le(wire);