diff options
author | Lassi Marttala <lassi.lm.marttala@partner.bmw.de> | 2012-06-04 10:50:33 +0200 |
---|---|---|
committer | Christian Muck <christian.muck@bmw.de> | 2012-06-13 23:53:07 +0200 |
commit | 021a364502c189c2cdcebbf9af06339aba7b7ffe (patch) | |
tree | 5b8d1ad19bb2786d8ce6c40789961bdd450d6a57 /src/daemon/dlt_daemon_common.c | |
parent | 54daad6cc95fb66662c894fabb5fd18308eec6e0 (diff) | |
download | DLT-daemon-021a364502c189c2cdcebbf9af06339aba7b7ffe.tar.gz |
[GENDLT-24]: Crash on invalid injection message.
Check that the size of the injection message is sane.
Signed-off-by: Christian Muck <christian.muck@bmw.de>
Diffstat (limited to 'src/daemon/dlt_daemon_common.c')
-rw-r--r-- | src/daemon/dlt_daemon_common.c | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/src/daemon/dlt_daemon_common.c b/src/daemon/dlt_daemon_common.c index 021dddf..be472a3 100644 --- a/src/daemon/dlt_daemon_common.c +++ b/src/daemon/dlt_daemon_common.c @@ -1304,6 +1304,12 @@ void dlt_daemon_control_callsw_cinjection(int sock, DltDaemon *daemon, DltMessag usercontext.log_level_pos = context->log_level_pos; + if(data_length_inject > msg->databuffersize) + { + dlt_daemon_control_service_response(sock, daemon, id, DLT_SERVICE_RESPONSE_ERROR, verbose); + return; + } + userbuffer = malloc(data_length_inject); if (userbuffer==0) |