diff options
| author | Fritz Elfert <felfert@to.com> | 2002-07-11 17:15:53 +0000 |
|---|---|---|
| committer | Fritz Elfert <felfert@to.com> | 2002-07-11 17:15:53 +0000 |
| commit | b1f7f0c63370d447adb8d1b188beed65777fe232 (patch) | |
| tree | ee527ffce62ea19ca8d9c3d7e4f1c7ee1bb331aa /lib | |
| parent | 6e69acee769a72e39fed628f637ec22589d6832c (diff) | |
| download | plptools-b1f7f0c63370d447adb8d1b188beed65777fe232.tar.gz plptools-b1f7f0c63370d447adb8d1b188beed65777fe232.tar.bz2 plptools-b1f7f0c63370d447adb8d1b188beed65777fe232.zip | |
- Fixed a possible exploit when using telnet (or any other network
client) connecting to ncpd.
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/ppsocket.cc | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/lib/ppsocket.cc b/lib/ppsocket.cc index 0053436..8940148 100644 --- a/lib/ppsocket.cc +++ b/lib/ppsocket.cc @@ -297,6 +297,8 @@ getBufferStore(bufferStore & a, bool wait) return -1; } l = ntohl(l); + if (l > 16384) + return -1; bp = buff = new unsigned char[l]; while (l > 0) { int j = recv(bp, l, MSG_NOSIGNAL); |