From 24aef4fbf141afe79e016f7097ef0d67f026b9b7 Mon Sep 17 00:00:00 2001 From: Andreas Schneider Date: Mon, 6 Aug 2018 09:19:45 +0200 Subject: [PATCH] sftp: Add missing size checks CID 1238630 Signed-off-by: Andreas Schneider --- src/sftp.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/sftp.c b/src/sftp.c index 3dd4c60e..640d1a0f 100644 --- a/src/sftp.c +++ b/src/sftp.c @@ -355,7 +355,7 @@ sftp_packet sftp_packet_read(sftp_session sftp) { ssh_buffer_get_u8(packet->payload, &packet->type); size = ntohl(tmp); - if (size == 0) { + if (size == 0 || size > UINT32_MAX) { return packet; } size--;