diff options
author | Lennart Poettering <lennart@poettering.net> | 2007-05-23 16:29:18 +0000 |
---|---|---|
committer | Lennart Poettering <lennart@poettering.net> | 2007-05-23 16:29:18 +0000 |
commit | f90339528b5f72aabf0008b83ff25bd6b78d05a0 (patch) | |
tree | 189c64076b34bc6c99d0124236b0a0c205fa1d09 | |
parent | 407a1b6efe059797fcbf583007de411321ed76b7 (diff) |
Fix another DoS vulnerability, also identified Luigi Auriemma (closes #67)
git-svn-id: file:///home/lennart/svn/public/pulseaudio/trunk@1446 fefdeb5f-60dc-0310-8127-8f9354f1896f
-rw-r--r-- | src/pulsecore/pstream.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/pulsecore/pstream.c b/src/pulsecore/pstream.c index dbee7763..897e4295 100644 --- a/src/pulsecore/pstream.c +++ b/src/pulsecore/pstream.c @@ -662,7 +662,7 @@ static int do_read(pa_pstream *p) { length = ntohl(p->read.descriptor[PA_PSTREAM_DESCRIPTOR_LENGTH]); - if (length > FRAME_SIZE_MAX_ALLOW) { + if (length > FRAME_SIZE_MAX_ALLOW || length <= 0) { pa_log_warn("Recieved invalid frame size : %lu", (unsigned long) length); return -1; } |