wt/mongoose
1
0 Fork 0
mirror of https://github.com/cesanta/mongoose.git synced 2026-10-14 10:20:01 +00:00
Code Issues Packages Projects Releases Wiki Activity

Check for int overflow when parsing WS frames

Browse Source 
PUBLISHED_FROM=b7325b38e881455df703b0b628c41931565ccb33
This commit is contained in:
Deomid Ryabkov authored and Cesanta Bot committed 2017-09-06 17:34:37 +00:00
1 parent f857f6394f
commit c8af7cdd27
1 file changed
+7 -1
Download Patch File Download Diff File Expand all files Collapse all files
mongoose.c
+7 -1
View File
@@ -9204,7 +9204,13 @@ static int mg_deliver_websocket_data(struct mg_connection *nc) {
}
frame_len = header_len + data_len;
ok = frame_len > 0 && frame_len <= buf_len;
ok = (frame_len > 0 && frame_len <= buf_len);
/* Check for overflow */
if (frame_len < header_len || frame_len < data_len) {
ok = 0;
nc->flags |= MG_F_CLOSE_IMMEDIATELY;
}
if (ok) {
struct websocket_message wsm;