Drop suspiciously large data

This is to avoid exhausting system memory.
2025-01-11 15:27:54 +00:00 · 2019-06-27 20:29:02 +08:00 · 2019-06-27 20:29:02 +08:00 · 6119cb370f
commit 6119cb370f
parent cd654d61fd
1 changed files with 6 additions and 0 deletions
--- a/src/app/qtsingleapplication/qtlocalpeer.cpp
+++ b/src/app/qtsingleapplication/qtlocalpeer.cpp
@ -191,6 +191,12 @@ void QtLocalPeer::receiveConnection()
    QByteArray uMsg;
    quint32 remaining;
    ds >> remaining;
+    if (remaining > 65535) {
+        // drop suspiciously large data
+        delete socket;
+        return;
+    }
+
    uMsg.resize(remaining);
    int got = 0;
    char* uMsgBuf = uMsg.data();