From 9860bfe384dcdc578fb793bbc0736e51131fe9a2 Mon Sep 17 00:00:00 2001 From: Jeremy Allison Date: Wed, 11 Feb 2004 23:25:51 +0000 Subject: More paranoia checks. Jeremy. (This used to be commit adf8ee3df75b8336d14ad093ad2ebc3a480d0017) --- source3/libsmb/asn1.c | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'source3') diff --git a/source3/libsmb/asn1.c b/source3/libsmb/asn1.c index 17170b015f..ecc5e3dee6 100644 --- a/source3/libsmb/asn1.c +++ b/source3/libsmb/asn1.c @@ -219,6 +219,11 @@ BOOL asn1_load(ASN1_DATA *data, DATA_BLOB blob) /* read from a ASN1 buffer, advancing the buffer pointer */ BOOL asn1_read(ASN1_DATA *data, void *p, int len) { + if (len < 0 || data->ofs + len < data->ofs || data->ofs + len < len) { + data->has_error = True; + return False; + } + if (data->ofs + len > data->length) { data->has_error = True; return False; -- cgit