timer23
/
efl
forked from enlightenment/efl
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

evas cseve - check msgsize before using - coverity 

fix CID 1039568
This commit is contained in:
Carsten Haitzler 2017-09-29 12:03:37 +09:00
parent 17e2783c6c
commit eb57415a7a
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
src/bin/evas/evas_cserve2_messages.c
View File

@ -87,7 +87,14 @@ cserve2_message_handler(int fd EINA_UNUSED, Fd_Flags flags, void *data)
return;
if (!client->msg.reading)
len = cserve2_client_read(client, &msgsize, sizeof(msgsize));
{
len = cserve2_client_read(client, &msgsize, sizeof(msgsize));
if ((msgsize < 0) || (msgsize > (128 * 1024)))
{
ERR("Client sending garbage message size of %i\n", msgsize);
return;
}
}
else
len = cserve2_client_read(client, &client->msg.buf[client->msg.done],
client->msg.size - client->msg.done);