summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorCarl Hetherington <cth@carlh.net>2020-11-25 15:34:49 +0100
committerCarl Hetherington <cth@carlh.net>2020-11-25 15:35:05 +0100
commit5731c1539b179524d511406c36260c81cba72b55 (patch)
treeb0e3e89a11ca0b912590ca29236177aa997a3d65
parent327b8e8018eabd774c70b9d67393a50fa53e463a (diff)
Ignore unreasonably-sized replies from servers.encode-servers
-rw-r--r--src/lib/encode_server_finder.cc5
1 files changed, 5 insertions, 0 deletions
diff --git a/src/lib/encode_server_finder.cc b/src/lib/encode_server_finder.cc
index 08559c971..b4dece8f1 100644
--- a/src/lib/encode_server_finder.cc
+++ b/src/lib/encode_server_finder.cc
@@ -226,6 +226,11 @@ EncodeServerFinder::handle_accept (boost::system::error_code ec, shared_ptr<Sock
socket->read (reinterpret_cast<uint8_t*> (&length), sizeof (uint32_t));
length = ntohl (length);
+ if (length > 32768) {
+ start_accept ();
+ return;
+ }
+
scoped_array<char> buffer (new char[length]);
socket->read (reinterpret_cast<uint8_t*> (buffer.get()), length);