diff options
author | Volker Lendecke <vl@samba.org> | 2018-12-29 20:20:13 +0100 |
---|---|---|
committer | Andreas Schneider <asn@samba.org> | 2019-01-11 14:16:59 +0100 |
commit | 9413e433ea83095735ddb8dd080bceecde8a9b57 (patch) | |
tree | 02ec8d779fda187e654ed920fcf7dfabbb7152a4 /src | |
parent | 8ccac24b78bc5aa758a02cdecf58bdd6b8d6da13 (diff) | |
download | socket_wrapper-9413e433ea83095735ddb8dd080bceecde8a9b57.tar.gz socket_wrapper-9413e433ea83095735ddb8dd080bceecde8a9b57.tar.xz socket_wrapper-9413e433ea83095735ddb8dd080bceecde8a9b57.zip |
swrap: Add an overflow check
Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
Diffstat (limited to 'src')
-rw-r--r-- | src/socket_wrapper.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/src/socket_wrapper.c b/src/socket_wrapper.c index df70df5..a0e1df0 100644 --- a/src/socket_wrapper.c +++ b/src/socket_wrapper.c @@ -4752,6 +4752,11 @@ static ssize_t swrap_sendmsg_before(int fd, for (i = 0; i < (size_t)msg->msg_iovlen; i++) { size_t nlen; nlen = len + msg->msg_iov[i].iov_len; + if (nlen < len) { + /* overflow */ + errno = EMSGSIZE; + goto out; + } if (nlen > mtu) { break; } |