twisterarmy/twister-core
1
0
Fork 0
mirror of https://github.com/twisterarmy/twister-core.git synced 2025-01-22 12:34:24 +00:00
Code Issues Projects Releases Wiki Activity

enforce bencoded size. sanity check.

Browse Source
This commit is contained in:
Miguel Freitas 2014-01-07 16:51:40 -02:00
parent 8e80324c36
commit 5ab658ae3d
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/twister.cpp
View File

@ -840,7 +840,9 @@ bool acceptSignedPost(char const *data, int data_size, std::string username, int
lazy_entry v;
int pos;
libtorrent::error_code ec;
if (lazy_bdecode(data, data + data_size, v, ec, &pos) == 0) {
if (data_size <= 0 || data_size > 2048 ) {
sprintf(errbuf,"bad bencoded post size");
} else if (lazy_bdecode(data, data + data_size, v, ec, &pos) == 0) {
if( v.type() == lazy_entry::dict_t ) {
lazy_entry const* post = v.dict_find_dict("userpost");