miniupnpc: quick fix for buffer overflow

http://talosintel.com/reports/TALOS-2015-0035/

reported by palexander on IRC
This commit is contained in:
moneromooo-monero
2015-10-09 14:29:36 -07:00
committed by Javier Smooth
parent 3525ea52ab
commit a8f9a538e9
+4
View File
@@ -15,6 +15,10 @@
void IGDstartelt(void * d, const char * name, int l)
{
struct IGDdatas * datas = (struct IGDdatas *)d;
if (l >= MINIUPNPC_URL_MAXSIZE) {
printf("Attempt to exploit miniupnpc buffer overflow\n");
l = MINIUPNPC_URL_MAXSIZE - 1;
}
memcpy( datas->cureltname, name, l);
datas->cureltname[l] = '\0';
datas->level++;