jpeg pushed a commit to branch master.

http://git.enlightenment.org/core/efl.git/commit/?id=6ace8313728b31f602af8af90dbcb686031be562

commit 6ace8313728b31f602af8af90dbcb686031be562
Author: Jean-Philippe Andre <jp.an...@samsung.com>
Date:   Mon Oct 27 22:16:53 2014 +0900

    Evas cserve2: Check message size
    
    Fixes CID 1039570
---
 src/bin/evas/evas_cserve2_usage.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/bin/evas/evas_cserve2_usage.c 
b/src/bin/evas/evas_cserve2_usage.c
index b1946ad..449c9fd 100644
--- a/src/bin/evas/evas_cserve2_usage.c
+++ b/src/bin/evas/evas_cserve2_usage.c
@@ -133,6 +133,10 @@ _server_read(int *size)
    if (n < 0)
      return NULL;
 
+   // We don't expect large messages
+   if (sr_size < 0 || sr_size > 0x10000)
+     return NULL;
+
    sr_buf = malloc(sr_size);
 
 get_data:

-- 


Reply via email to