add size check

aa5ca0e3 · Hubert Denkmair · d70f5bbf · aa5ca0e3
Commit aa5ca0e3 authored Apr 12, 2018 by Hubert Denkmair
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 0 deletions

relayserver/TcpProtocol.cpp relayserver/TcpProtocol.cpp +1 -0

No files found.
--- a/relayserver/TcpProtocol.cpp
+++ b/relayserver/TcpProtocol.cpp
@@ -25,6 +25,7 @@ bool TcpProtocol::Read(int socket)
 	while ((_bufTail - _bufHead)>=4)
 	{
 		size_t size = 4 + ntohl(*(reinterpret_cast<uint32_t*>(&_buf[_bufHead])));
+		if (size > _buf.size()) { return false; }
 		if (size <= (_bufTail - _bufHead))
 		{
 			OnMessageReceived(&_buf[_bufHead+4], size-4);