diff options
| author | Cristian RodrÃguez <crrodriguez@opensuse.org> | 2011-05-06 18:25:34 -0300 |
|---|---|---|
| committer | Christian Beier <dontmind@freeshell.org> | 2011-05-09 12:19:20 +0200 |
| commit | c8b8938106816500062336cae9f936cd7722c1bb (patch) | |
| tree | c4d7c89fe405185ba21a8f663c5e0a45cfc8b121 | |
| parent | 984706076c2dd150a1e2302dfe6344fb39f56635 (diff) | |
| download | libtdevnc-c8b8938106816500062336cae9f936cd7722c1bb.tar.gz libtdevnc-c8b8938106816500062336cae9f936cd7722c1bb.zip | |
Fix buffer overflow
Signed-off-by: Cristian RodrÃguez <crrodriguez@opensuse.org>
Signed-off-by: Christian Beier <dontmind@freeshell.org>
| -rw-r--r-- | libvncserver/tightvnc-filetransfer/filetransfermsg.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libvncserver/tightvnc-filetransfer/filetransfermsg.c b/libvncserver/tightvnc-filetransfer/filetransfermsg.c index 7dae2cd..a0d7a5e 100644 --- a/libvncserver/tightvnc-filetransfer/filetransfermsg.c +++ b/libvncserver/tightvnc-filetransfer/filetransfermsg.c @@ -393,7 +393,7 @@ FileTransferMsg CreateFileDownloadZeroSizeDataMsg(unsigned long mTime) { FileTransferMsg fileDownloadZeroSizeDataMsg; - int length = sz_rfbFileDownloadDataMsg + sizeof(int); + int length = sz_rfbFileDownloadDataMsg + sizeof(unsigned long); rfbFileDownloadDataMsg *pFDD = NULL; char *pFollow = NULL; |