d4708/qBittorrent
1
0
Fork 0
mirror of https://github.com/d47081/qBittorrent.git synced 2025-08-26 05:32:05 +00:00
Code Issues Projects Releases Wiki Activity

Drop suspiciously large data

Browse Source 
This is to avoid exhausting system memory.
This commit is contained in:
Chocobo1 2019-06-27 20:29:02 +08:00
parent cd654d61fd
commit 6119cb370f
No known key found for this signature in database
GPG Key ID: 210D9C873253A68C
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/app/qtsingleapplication/qtlocalpeer.cpp
View File

@ -191,6 +191,12 @@ void QtLocalPeer::receiveConnection()
QByteArray uMsg; QByteArray uMsg;
quint32 remaining; quint32 remaining;
ds >> remaining; ds >> remaining;
if (remaining > 65535) {
// drop suspiciously large data
delete socket;
return;
}
uMsg.resize(remaining); uMsg.resize(remaining);
int got = 0; int got = 0;
char* uMsgBuf = uMsg.data(); char* uMsgBuf = uMsg.data();