pidgin/ljfisher-ssl-client-auth

Oops, I forgot to move the size check to the new location.

2011-03-10, Elliott Sales de Andrade
06233b79d75e
Parents c557ab744010
Children 735729841805
Oops, I forgot to move the size check to the new location.
1 files changed, 7 insertions(+), 1 deletions(-)
  • +7 -1
    libpurple/protocols/msn/p2p.c
    • --- a/libpurple/protocols/msn/p2p.c Thu Mar 10 05:00:17 2011 +0000
    +++ b/libpurple/protocols/msn/p2p.c Thu Mar 10 05:07:48 2011 +0000
    @@ -90,12 +90,18 @@
    size_t
    msn_p2p_header_from_wire(MsnP2PInfo *info, const char *wire, size_t max_len)
    {
    - size_t len;
    + size_t len = 0;
    switch (info->version) {
    case MSN_P2P_VERSION_ONE: {
    MsnP2PHeader *header = &info->header.v1;
    + if (max_len < P2P_PACKET_HEADER_SIZE) {
    + /* Invalid packet length */
    + len = 0;
    + break;
    + }
    +
    header->session_id = msn_pop32le(wire);
    header->id = msn_pop32le(wire);
    header->offset = msn_pop64le(wire);