diff options
| author | Jay Sorg <jay.sorg@gmail.com> | 2013-09-10 16:00:30 -0700 |
|---|---|---|
| committer | Jay Sorg <jay.sorg@gmail.com> | 2013-09-10 16:00:30 -0700 |
| commit | 39ed446e1513c52f795d090fc9b1f173c0912d6a (patch) | |
| tree | 6e47fae59fd77f52b44fa3d1bf51871152e9a363 /common/trans.c | |
| parent | 4e58a5a3c022f90ce9219e126893b721fee2b90a (diff) | |
| download | xrdp-proprietary-39ed446e1513c52f795d090fc9b1f173c0912d6a.tar.gz xrdp-proprietary-39ed446e1513c52f795d090fc9b1f173c0912d6a.zip | |
VUL: fix some possible buffer overruns
Diffstat (limited to 'common/trans.c')
| -rw-r--r-- | common/trans.c | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/common/trans.c b/common/trans.c index 0b672168..8313b606 100644 --- a/common/trans.c +++ b/common/trans.c @@ -221,8 +221,12 @@ trans_force_read_s(struct trans *self, struct stream *in_s, int size) while (size > 0) { + /* make sure stream has room */ + if ((in_s->end + size) > (in_s->data + in_s->size)) + { + return 1; + } rcvd = g_tcp_recv(self->sck, in_s->end, size, 0); - if (rcvd == -1) { if (g_tcp_last_error_would_block(self->sck)) |