Sanitize mud_decrypt_msg()
Signed-off-by: Adrien Gallouët <adrien@gallouet.fr>
This commit is contained in:
2
mud.c
2
mud.c
@@ -1144,7 +1144,7 @@ mud_decrypt_msg(struct mud *mud,
|
|||||||
{
|
{
|
||||||
const size_t size = src_size - MUD_PKT_MIN_SIZE;
|
const size_t size = src_size - MUD_PKT_MIN_SIZE;
|
||||||
|
|
||||||
if (size < sizeof(struct mud_msg))
|
if (size < sizeof(struct mud_msg) || size > dst_size)
|
||||||
return 0;
|
return 0;
|
||||||
|
|
||||||
const struct mud_crypto_opt opt = {
|
const struct mud_crypto_opt opt = {
|
||||||
|
|||||||
Reference in New Issue
Block a user