dandri/i2pd
1
0 Fork 0
mirror of https://github.com/PurpleI2P/i2pd.git synced 2026-10-23 17:12:48 +00:00
Code Issues Packages Projects Releases Wiki Activity

libi2pd: add missing size checks

Browse Source
This commit is contained in:
jpk68 committed 2026-08-17 13:27:12 -04:00
1 parent d9cd383b08
commit 575acd6f13
6 files changed
+69 -9
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

libi2pd/Destination.cpp
+10
View File
@@ -355,6 +355,11 @@ namespace client
void LeaseSetDestination::HandleI2NPMessage (const uint8_t * buf, size_t len)
{
if (len < I2NP_HEADER_SIZE)
{
LogPrint (eLogWarning, "Destination: I2NP message is too short ", len);
return;
}
I2NPMessageType typeID = (I2NPMessageType)(buf[I2NP_HEADER_TYPEID_OFFSET]);
uint32_t msgID = bufbe32toh (buf + I2NP_HEADER_MSGID_OFFSET);
LeaseSetDestination::HandleCloveI2NPMessage (typeID, buf + I2NP_HEADER_SIZE,
@@ -1205,6 +1210,11 @@ namespace client
void ClientDestination::HandleDataMessage (const uint8_t * buf, size_t len,
i2p::garlic::ECIESX25519AEADRatchetSession * from)
{
if (len < 14) // 4-byte length prefix, then fromPort/toPort/protocol read at offsets up to 9 past it
{
LogPrint (eLogWarning, "Destination: Data message is too short ", len);
return;
}
uint32_t length = bufbe32toh (buf);
if(length > len - 4)
{