jh163888/xrdp
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

check for RDP PDU size too small and remove 0x8000 length check

Browse Source
This commit is contained in:
jsorg71 2009-12-23 07:04:32 +00:00
parent 6cf7c913f8
commit bb4a15b5dc
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
libxrdp/xrdp_rdp.c
View File

@ -226,14 +226,16 @@ xrdp_rdp_recv(struct xrdp_rdp* self, struct stream* s, int* code)
{ {
s->p = s->next_packet; s->p = s->next_packet;
} }
in_uint16_le(s, len); if (!s_check_rem(s, 6))
if (len == 0x8000)
{ {
s->next_packet += 8; s->next_packet = 0;
*code = 0; *code = 0;
DEBUG(("out xrdp_rdp_recv")); DEBUG(("out xrdp_rdp_recv"));
len = (int)(s->end - s->p);
g_writeln("xrdp_rdp_recv: bad RDP packet, length [%d]", len);
return 0; return 0;
} }
in_uint16_le(s, len);
in_uint16_le(s, pdu_code); in_uint16_le(s, pdu_code);
*code = pdu_code & 0xf; *code = pdu_code & 0xf;
in_uint8s(s, 2); /* mcs user id */ in_uint8s(s, 2); /* mcs user id */