jh163888/xrdp
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

bounds check when loading font

Browse Source
This commit is contained in:
jsorg71 2006-04-16 02:20:20 +00:00
parent 8fd2618101
commit eef98128fc
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
xrdp/xrdp_font.c
View File

@ -108,6 +108,13 @@ xrdp_font_create(struct xrdp_wm* wm)
f->incby = i;
in_uint8s(s, 6);
datasize = FONT_DATASIZE(f);
if (datasize < 0 || datasize > 512)
{
/* shouldn't happen */
g_writeln("error in xrdp_font_create, datasize wrong");
g_writeln("%d %d %d", f->width, f->height, datasize);
break;
}
if (s_check_rem(s, datasize))
{
f->data = (char*)g_malloc(datasize, 0);