aboutsummaryrefslogtreecommitdiff
path: root/src
diff options
context:
space:
mode:
authorVolker Lendecke <vl@samba.org>2018-12-29 20:20:13 +0100
committerAndreas Schneider <asn@samba.org>2019-01-11 14:16:59 +0100
commit9413e433ea83095735ddb8dd080bceecde8a9b57 (patch)
tree02ec8d779fda187e654ed920fcf7dfabbb7152a4 /src
parent8ccac24b78bc5aa758a02cdecf58bdd6b8d6da13 (diff)
downloadsocket_wrapper-9413e433ea83095735ddb8dd080bceecde8a9b57.tar.gz
socket_wrapper-9413e433ea83095735ddb8dd080bceecde8a9b57.tar.xz
socket_wrapper-9413e433ea83095735ddb8dd080bceecde8a9b57.zip
swrap: Add an overflow check
Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
Diffstat (limited to 'src')
-rw-r--r--src/socket_wrapper.c5
1 files changed, 5 insertions, 0 deletions
diff --git a/src/socket_wrapper.c b/src/socket_wrapper.c
index df70df5..a0e1df0 100644
--- a/src/socket_wrapper.c
+++ b/src/socket_wrapper.c
@@ -4752,6 +4752,11 @@ static ssize_t swrap_sendmsg_before(int fd,
for (i = 0; i < (size_t)msg->msg_iovlen; i++) {
size_t nlen;
nlen = len + msg->msg_iov[i].iov_len;
+ if (nlen < len) {
+ /* overflow */
+ errno = EMSGSIZE;
+ goto out;
+ }
if (nlen > mtu) {
break;
}