gnustep/libs-base
0
0
Fork 0
mirror of https://github.com/gnustep/libs-base.git synced 2025-04-23 09:04:13 +00:00
Code Issues Projects Releases Packages Wiki Activity

iFix possible denial of service attack

Browse source
This commit is contained in:
Richard Frith-Macdonald 2018-01-23 13:56:13 +00:00
parent c7ba537c75
commit 4dc28bce56
1 changed files with 11 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
Tools/gdomap.c
View file

@ -3717,10 +3717,10 @@ static int
tryHost(unsigned char op, unsigned char len, const unsigned char *name,
int ptype, struct sockaddr_in *addr, unsigned short *p, uptr *v)
{
int desc = socket(AF_INET, SOCK_STREAM, 0);
int e = 0;
int desc = socket(AF_INET, SOCK_STREAM, 0);
int e = 0;
uint32_t port = *p;
gdo_req msg;
gdo_req msg;
struct sockaddr_in sin;
#if defined(__MINGW__)
uint32_t dummy;
@ -3889,6 +3889,14 @@ int ptype, struct sockaddr_in *addr, unsigned short *p, uptr *v)
uptr ptr;
uptr b;
if (len <= 0 || len > 10000000)
{
snprintf(ebuf, sizeof(ebuf),
"Insanely large list of registered names");
gdomap_log(LOG_ERR);
close(desc);
return 5; // Unreasonable number of registrations
}
b = (uptr)malloc(len);
if (tryRead(desc, 3, b, len) != len)
{