dandri/i2pd
1
0
Fork 0
mirror of https://github.com/PurpleI2P/i2pd.git synced 2026-10-15 06:50:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

check for possible buffer length value overflow

Browse Source
This commit is contained in:
orignal
2026-09-20 12:51:31 -04:00
parent 79c1f4caa1
commit be17c94088
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
libi2pd_client/Torrents.cpp
+2 -1
View File
@@ -15,6 +15,7 @@
#include <sstream>
#include <algorithm>
#include <functional>
#include <limits>
#include <set>
#include <boost/algorithm/string.hpp>
#include <boost/algorithm/hex.hpp>
@@ -40,7 +41,7 @@ namespace torrents
{
size_t len = 0;
auto res = std::from_chars(buf.data(), buf.data() + pos, len);
if (res.ec == std::errc())
if (res.ec == std::errc() && len <= std::numeric_limits<size_t>::max () - pos - 1)
{
size_t totalLength = len + pos + 1;
if (totalLength <= buf.length ())