Evas cserve2: Check message size

Fixes CID 1039570
2014-10-27 22:16:53 +09:00 · 2014-10-27 22:16:53 +09:00 · 6ace831372
parent e550b37453
commit 6ace831372
1 changed files with 4 additions and 0 deletions
--- a/src/bin/evas/evas_cserve2_usage.c
+++ b/src/bin/evas/evas_cserve2_usage.c
@ -133,6 +133,10 @@ _server_read(int *size)
   if (n < 0)
     return NULL;

+   // We don't expect large messages
+   if (sr_size < 0 || sr_size > 0x10000)
+     return NULL;
+
   sr_buf = malloc(sr_size);

 get_data: