github/qBittorrent
1
0
Fork 0
mirror of https://github.com/qbittorrent/qBittorrent synced 2025-07-16 02:03:07 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Drop suspiciously large data

Browse source 
This is to avoid exhausting system memory.
This commit is contained in:
Chocobo1 2019-06-27 20:29:02 +08:00
parent a8bfec081e
commit 31a6ad1eb6
No known key found for this signature in database
GPG key ID: 210D9C873253A68C
1 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
src/app/qtsingleapplication/qtlocalpeer.cpp
View file

@ -191,6 +191,12 @@ void QtLocalPeer::receiveConnection()
QByteArray uMsg; QByteArray uMsg;
quint32 remaining; quint32 remaining;
ds >> remaining; ds >> remaining;
if (remaining > 65535) {
// drop suspiciously large data
delete socket;
return;
}
uMsg.resize(remaining); uMsg.resize(remaining);
int got = 0; int got = 0;
char* uMsgBuf = uMsg.data(); char* uMsgBuf = uMsg.data();