X-Git-Url: http://git.shiar.net/netris.git/blobdiff_plain/a3b41d71c27b89c5f3e82226316e031e3f8eb253..c10d1dbf9b8a08c22c5aae88fb92f9a282fe1120:/inet.c diff --git a/inet.c b/inet.c index dbfe748..a8d9a9d 100644 --- a/inet.c +++ b/inet.c @@ -151,6 +151,9 @@ static MyEventType NetGenFunc(EventGenRec *gen, MyEvent *event) memcpy(data, netBuf, sizeof(data)); type = ntoh2(data[0]); size = ntoh2(data[1]); + if (size >= sizeof(netBuf)) + fatal("Received an invalid packet (too large), possibly an attempt\n" + " to exploit a vulnerability in versions before 0.52 !"); netBufGoal = size; if (netBufSize < netBufGoal) return E_none;