xfnw/plan9fox
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

aan: check negative message size in header

Browse source
This commit is contained in:
cinap_lenrek 2017-02-02 20:53:05 +01:00
parent 7516e85813
commit 65337bec22
1 changed files with 6 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
sys/src/cmd/aan.c
View file

@ -310,14 +310,11 @@ fromnet(void*)
len, n, m, acked, lastacked);
if (n == 0) {
if (m >= 0) {
dmessage(1, "fromnet; network closed\n");
break;
}
continue;
}
if (n > Bufsize) {
if (m < 0)
continue;
dmessage(1, "fromnet; network closed\n");
break;
} else if (n < 0 || n > Bufsize) {
dmessage(1, "fromnet; message too big %d > %d\n", n, Bufsize);
break;
}
@ -337,6 +334,7 @@ fromnet(void*)
dmessage(1, "fromnet; skipping message %d, currently at %d\n", m, inmsg);
continue;
}
inmsg++;
// Process the acked list.
while(lastacked != acked) {
@ -352,7 +350,6 @@ fromnet(void*)
sendp(empty, rb);
lastacked++;
}
inmsg++;
showmsg(1, "fromnet", b);