X-Git-Url: https://git.deb.at/w?p=pkg%2Fnetris.git;a=blobdiff_plain;f=inet.c;fp=inet.c;h=a8d9a9d9149c9b67e3c05516d1b040f970cad8f1;hp=dbfe7484f0d8b9bb2a65f956ce9afc7e9d979bb5;hb=91e5667aae786e39a33ea9d47a27b8e3e0f32a38;hpb=b49a491544fbd21beb14a44f6ccf5983b6a2f8dc

diff --git a/inet.c b/inet.c
index dbfe748..a8d9a9d 100644
--- a/inet.c
+++ b/inet.c
@@ -151,6 +151,9 @@ static MyEventType NetGenFunc(EventGenRec *gen, MyEvent *event)
 	memcpy(data, netBuf, sizeof(data));
 	type = ntoh2(data[0]);
 	size = ntoh2(data[1]);
+	if (size >= sizeof(netBuf))
+		fatal("Received an invalid packet (too large), possibly an attempt\n"
+			  "  to exploit a vulnerability in versions before 0.52 !");
 	netBufGoal = size;
 	if (netBufSize < netBufGoal)
 		return E_none;