VUL: fix some possible buffer overruns

2013-09-05 14:37:50 -07:00 · 2013-09-05 14:37:50 -07:00 · 9533e7fa2e
commit 9533e7fa2e
parent 0bc3ee2cd7
1 changed files with 5 additions and 0 deletions
--- a/libxrdp/xrdp_mcs.c
+++ b/libxrdp/xrdp_mcs.c
@ -341,6 +341,11 @@ xrdp_mcs_recv_connect_initial(struct xrdp_mcs* self)
    free_stream(s);
    return 1;
  }
+  if (!s_check_rem(s, len))
+  {
+    free_stream(s);
+    return 1;
+  }
  /* make a copy of client mcs data */
  init_stream(self->client_mcs_data, len);
  out_uint8a(self->client_mcs_data, s->p, len);