X-Git-Url: https://git.deb.at/w?a=blobdiff_plain;f=inet.c;h=24993ab2fb73149045f361e3304e896d5fc7fca7;hb=refs%2Ftags%2Fdebian%2F0.5-4woody1;hp=dbfe7484f0d8b9bb2a65f956ce9afc7e9d979bb5;hpb=7772a97708eea70899b86e98d23473b436438148;p=pkg%2Fnetris.git diff --git a/inet.c b/inet.c index dbfe748..24993ab 100644 --- a/inet.c +++ b/inet.c @@ -151,6 +151,9 @@ static MyEventType NetGenFunc(EventGenRec *gen, MyEvent *event) memcpy(data, netBuf, sizeof(data)); type = ntoh2(data[0]); size = ntoh2(data[1]); + if (size >= sizeof(netBuf)) + fatal("Received an invalid packet (too large), possibly an attempt\n" + " to exploit a vulnerability in versions before 0.52 !"); netBufGoal = size; if (netBufSize < netBufGoal) return E_none;