GOSTSec/sgminer
1
0
Fork 0
mirror of https://github.com/GOSTSec/sgminer synced 2025-02-02 01:44:23 +00:00
Code Issues Releases Wiki Activity

Stratum: extract_sockaddr: Truncate overlong addresses rather than stack overflow

Browse Source 
Thanks to Mick Ayzenberg <mick@dejavusecurity.com> for finding this!
This commit is contained in:
Luke Dashjr 2014-06-05 17:05:12 +00:00 committed by Noel Maersk
parent 44e770904e
commit 91d29ea972
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
util.c
View File

@ -1218,6 +1218,13 @@ bool extract_sockaddr(char *url, char **sockaddr_url, char **sockaddr_port)
if (url_len < 1) if (url_len < 1)
return false; return false;
if (url_len >= sizeof(url_address))
{
applog(LOG_WARNING, "%s: Truncating overflowed address '%.*s'",
__func__, url_len, url_begin);
url_len = sizeof(url_address) - 1;
}
sprintf(url_address, "%.*s", url_len, url_begin); sprintf(url_address, "%.*s", url_len, url_begin);